Hi, We have noticed a performance regression on some of our boxes when we upgraded from Ubuntu 18.04 (sssd 1.16.1-1ubuntu1.7) (sudo 1.8.21p2) -> Ubuntu 20.04 (sssd 2.2.3-3ubuntu0.1) (sudo 1.8.31) (however it was not universal, some Ubuntu 20.04 boxes are fine) joined to a FreeIPA domain.

We have noticed the following line takes a long when turned on sudo debug logging (not sure if this is red hearing) sudo_pam_approval @ ../../../plugins/sudoers/auth/pam.c:330

Any idea what may cause this, or something to try would be much appreciated?

see benchmark Ubuntu 18.04 ./hyperfine "sudo -u user true" --warmup 5 Benchmark #1: sudo -u trans true Time (mean ± σ): 51.0 ms ± 24.6 ms [User: 5.7 ms, System: 3.5 ms] Range (min … max): 42.1 ms … 236.7 ms 60 runs

Ubuntu 20.04 Benchmark #1: sudo -u user true Time (mean ± σ): 436.0 ms ± 36.1 ms [User: 15.2 ms, System: 14.7 ms] Range (min … max): 407.4 ms … 534.3 ms 10 runs