On (15/04/15 10:37), tmpchq wrote:
It was my mistake, I missed [domain] section. Below is at log level 6:
It spent time on checking for SELinux mapping, avahi and polkitd.
SELinux mapping should not be checked if you set "selinux_provider=none" Some patches which improve speed caused by SELinux integration in ipa provider were pushed to upstream.
You can test with snapshot of 1.12 branch https://copr.fedoraproject.org/coprs/lslebodn/sssd-1-12-latest/
The initgroups was called for avahi and polkitd. It cannot be filtered out with options filter_users, filter_groups but it should not take a long time unless there is a problem with network.
It would be good to add add microseconds to the timestamp. add "debug_microseconds = true" to domain section.
LS