On Mon, Apr 13, 2015 at 05:41:43PM -0400, Dmitri Pal wrote:
On 04/13/2015 05:29 PM, Qing Chang wrote:
>Thanks Lucas for the information.
>
>I tried the selinux line, it did not seem to make a difference.
>
>As I said in my original email, login to the IPA server itself does not
>exhibit the same behavior, although
>every system has the same SSSD configuration and SElinux enabled. I
>actually tried "setenforce 0"
>on a client without any effect either.
>
>I checked all the reference you provided, my feelings is that the events
>add up still would not account for 5 seconds delay:-(
>
>If anybody would like to have debug information, please let me know (the
>procedure to produce). Please also let me know if I should file a bug.
Please see SSSD troubleshooting page. [1]
Rise debug_level, inspect the logs and see what operation is really taking
the time.
I suspect this there some DNS release timeout that you are hitting but
without logs it is not possible to say.
[1]
https://fedorahosted.org/sssd/wiki/Troubleshooting
Right. Also, are those IPA users or AD users through trusts? (I suspect
the former).