-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/11/2013 09:03 AM, Sutton, Harry (GSSE) wrote:
On 04/11/2013 08:44 AM, Stephen Gallagher wrote:
>
> Also, try the following experiment:
>
> time id -G <localuser>
>
> and show me the output.
>
On the Fedora laptop:
real 0m58.014s user 0m0.001s sys 0m0.007s
On the RHEL workstation:
real 0m58.012s user 0m0.001s sys 0m0.001s
Ok, that definitely is showing where the problem lies. This strongly
suggests to me that you have a user in your LDAP with the same name as
on your local system. What's most likely happening is that the
initgroups() call internally is walking through and processing all of
the potential groups that username belongs to.
Can you check whether
getent -s sss passwd <localuser>
Returns anything? If it does, you have an overlap and should probably
resolve it on one side or the other.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlFmtjYACgkQeiVVYja6o6Ng4ACgr/s1SoT0o3g2DhMJhKtPCI1A
xWQAnjSVCcBdbJBfOD3U8A0OgE8/Hlad
=WbvW
-----END PGP SIGNATURE-----