[SSSD-users] authentication against IPA with SSSD takes long (more than 5 seconds)
Janelle
janellenicole80 at gmail.com
Mon Apr 13 19:33:14 UTC 2015
On 4/13/15 12:28 PM, Qing Chang wrote:
> OS: CentoOS 7.1
> IPA: 4.1.0-18
> SSSD: 1.12.2-58
>
> With IPA any clients running CentOS7.1 authentication for ssh and sudo
> takes more than 5 seconds _after_ putting in password. If ssh to the
> IPA server itself, it authenticates instantly.
>
> Google did not provide much relevant information. Note that this is
> not a slow ssh session to get to authentication prompt, it always gets
> to the prompt without delay.
>
> Also it is not related to NFS performance, it is equally slow if I
> login to a NFS server (IPA client) locally or login to a server (also
> a IPA client) that has autofs home.
>
> IPA server is a fresh installation with just a couple of users. I had
> an installation previously that has more than a thousand user accounts
> on CentOS 6. Users did not have the slowness problem as with this new
> installation.
>
> Hope this list can provide some pointers.
>
> Thanks in advance.
>
> Qing Chang
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
You might try changing /etc/nsswitch.conf and remove SSS from suoders. I
have been finding this slows down a lot of operations. Not sure if it is
the same as your problem, but it can't hurt to try it.
~J
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150413/9a005e55/attachment.html>
More information about the sssd-users
mailing list