You might hit bug.On (13/04/15 15:28), Qing Chang wrote:
>OS: CentoOS 7.1
>With IPA any clients running CentOS7.1 authentication for ssh and sudo
>takes more than 5 seconds _after_ putting in password. If ssh to the IPA
>server itself, it authenticates instantly.
>Google did not provide much relevant information. Note that this is not a
>slow ssh session to get to authentication prompt, it always gets to the
>prompt without delay.
>Also it is not related to NFS performance, it is equally slow if I login to
>a NFS server (IPA client) locally or login to a server (also a IPA client)
>that has autofs home.
>IPA server is a fresh installation with just a couple of users. I had an
>installation previously that has more than a thousand user accounts on
>CentOS 6. Users did not have the slowness problem as with this new
>Hope this list can provide some pointers.
If you do not use SELinux ser mapping you can try to disable
put "selinux_provider = none" into domain section of sssd.conf
If it doesn't help you can tahe a look on sssd<->systemd conversation in mail
sssd-users mailing list