[SSSD-users] authentication against IPA with SSSD takes long (more than 5 seconds)

Janelle janellenicole80 at gmail.com
Mon Apr 13 19:33:14 UTC 2015


On 4/13/15 12:28 PM, Qing Chang wrote:
> OS: CentoOS 7.1
> IPA: 4.1.0-18
> SSSD: 1.12.2-58
>
> With IPA any clients running CentOS7.1 authentication for ssh and sudo 
> takes more than 5 seconds _after_ putting in password. If ssh to the 
> IPA server itself, it authenticates instantly.
>
> Google did not provide much relevant information. Note that this is 
> not a slow ssh session to get to authentication prompt, it always gets 
> to the prompt without delay.
>
> Also it is not related to NFS performance, it is equally slow if I 
> login to a NFS server (IPA client) locally or login to a server (also 
> a IPA client) that has autofs home.
>
> IPA server is a fresh installation with just a couple of users. I had 
> an installation previously that has more than a thousand user accounts 
> on CentOS 6. Users did not have the slowness problem as with this new 
> installation.
>
> Hope this list can provide some pointers.
>
> Thanks in advance.
>
> Qing Chang
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
You might try changing /etc/nsswitch.conf and remove SSS from suoders. I 
have been finding this slows down a lot of operations. Not sure if it is 
the same as your problem, but it can't hurt to try it.

~J

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150413/9a005e55/attachment.html>


More information about the sssd-users mailing list