InitializeSecurityContext with SEC_WINNT_AUTH_IDENTITY is very slow

[srsoltis]

Hi all,

I'm trying to get MS's SockAuth sample (modified with a gui) to login with password authentication. I use CredUIPromptForCredentials() to retrieve user credientials. If these credientials are not saved but rather passed to AcquireCredentialsHandle() with pAuthData pointing to a completed SEC_WINNT_AUTH_IDENTITY structure, the next call to InitializeSecurityContext() takes 35+ seconds before it completes successfully.

However, if the credentials from CredUIPromptForCredentials() are saved (thereby saving the username/password in "Stored Usernames and Passwords"), all InitializeSecurityContext() calls return without any delay.

What is causing this delay? I don't want to punish users that don't wish to save passwords locally.

Also, I've tried sending ISC_REQ_PROMPT_FOR_CREDS to InitializeSecurityContext() but it doesn't prompt for credientials. Any ideas?

TIA,

Steve