ASP.NET Login control is very slow making the initial connection to AD when authenticating to a different domain than the domain the web server is a member of. Problem occur
If you have the .NET 2.0 SP1 installed just add the following to the machine.config (of course all sites will not check verisign any longer)
http://forums.asp.net/t/968778.aspx