Hi Sumit,
setting 'pam_initgroups_scheme = never' indeed helps with not retrieving group
memberships during the lock screen.
However, the request time is indeed long still, I don't think setting pam_id_timeout
to a high value is really smart to do..
Although it helps with speeding up requests as it uses the memory cache more often, it
will have he side effect of not loading AD groups?
Are there any other negative side effects?
Greetings,
Robert