[SSSD-users] authentication against IPA with SSSD takes long (more than 5 seconds)

tmpchq tmpchq at gmail.com
Tue Apr 14 17:31:04 UTC 2015


I started with level 6 and went up to 10 with pretty much the same logs.

There is probably quite some noise, but look at the lines around the gap
from 13:05:06 to 13:05:08. That is about the duration of the delay.
Responders other than nss and pam did not log anything within that time 
span.


----- sssd_nss.log -----
(Tue Apr 14 13:05:03 2015) [sssd[nss]] [sbus_handler_got_caller_id] 
(0x4000): Received SBUS method [ping]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [17] with input [qchang].
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [qchang] from [<ALL>]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0100): Requesting info for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b567300

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b568490

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b568490 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400): Cached 
entry is valid, returning..
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0400): Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [17] with input [qchang].
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [qchang] from [<ALL>]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0100): Requesting info for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b567300

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b568490

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b568490 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400): Cached 
entry is valid, returning..
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0400): Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [17] with input [qchang].
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [qchang] from [<ALL>]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0100): Requesting info for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b567300

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b568490

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b568490 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b567300 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400): Cached 
entry is valid, returning..
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0400): Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_dispatch] (0x4000): dbus 
conn: 0x7f8a5b563dd0
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_dispatch] (0x4000): 
Dispatching.
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_message_handler] (0x4000): 
Received SBUS method [initgrCheck]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_get_sender_id_send] 
(0x2000): Not a sysbus message, quit
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_handler_got_caller_id] 
(0x4000): Received SBUS method [initgrCheck]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_memcache_initgr_check] 
(0x1000): Got request for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b567e20

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b574840

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b567e20 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b574840 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b567e20 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b567e20

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b56bf50

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b567e20 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b575580

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b575640

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b56bf50 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b567e20 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b575580 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b575640 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b575580 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [17] with input [qchang].
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [qchang] from [<ALL>]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0100): Requesting info for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b5682c0

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b567e20

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b5682c0 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b567e20 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b5682c0 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400): Cached 
entry is valid, returning..
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0400): Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [17] with input [qchang].
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [qchang] from [<ALL>]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0100): Requesting info for [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_callback": 0x7f8a5b56c920

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed event 
"ltdb_timeout": 0x7f8a5b574840

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer 
event 0x7f8a5b56c920 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying timer 
event 0x7f8a5b574840 "ltdb_timeout"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer 
event 0x7f8a5b56c920 "ltdb_callback"

(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400): Cached 
entry is valid, returning..
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search] 
(0x0400): Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b56cc60][20]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [get_client_cred] (0x4000): 
Client creds: euid[81] egid[81] pid[503].
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b574840][21]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [accept_fd_handler] (0x0400): 
Client connected!
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b574840][21]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): 
Received client version [1].
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_cmd_get_version] (0x0200): 
Offered version [1].
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b574840][21]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f8a5b574840][21]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400): 
Running command [38] with input [root].
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_parse_name_for_domains] 
(0x0200): name 'root' matched without domain, user is root
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100): 
Requesting info for [root] from [<ALL>]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/root]
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_initgroups_search] 
(0x0400): User [root] does not exist in [mr.ric]! (negative cache)
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_initgroups_search] 
(0x0080): No matching domain found for [root], fail!
-----
----- sssd_pam.log -----
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_check_user_search] (0x0400): 
Returning info for user [qchang at mr.ric]
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_dp_send_req] (0x0100): 
Sending request with the following data:
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
command: PAM_ACCT_MGMT
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
domain: mr.ric
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): user: 
qchang
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
service: sshd
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): ruser: 
not set
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): rhost: 
172.25.12.157
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
authtok type: 0
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
newauthtok type: 0
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): 
cli_pid: 7402
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100): logon 
name: qchang
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [sbus_add_timeout] (0x2000): 
0x7f1aff4200a0
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_dom_forwarder] (0x0100): 
pam_dp_send_req returned 0
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_remove_timeout] (0x2000): 
0x7f1aff4200a0
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_dispatch] (0x4000): dbus 
conn: 0x7f1aff41ddd0
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_dispatch] (0x4000): 
Dispatching.
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_dp_process_reply] (0x0100): 
received: [0][mr.ric]
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_reply] (0x0200): pam_reply 
called with result [0].
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_reply] (0x0200): blen: 23
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f1aff421b40][19]
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [reset_idle_timer] (0x4000): Idle 
timer re-set for client [0x7f1aff421b40][19]
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_cmd_setcred] (0x0100): 
entering pam_cmd_setcred
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sss_parse_name_for_domains] 
(0x0200): name 'qchang' matched without domain, user is qchang
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
command: PAM_SETCRED
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
domain: not set
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): user: 
qchang
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
service: sshd
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): tty: ssh
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): ruser: 
not set
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): rhost: 
172.25.12.157
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
authtok type: 0
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
newauthtok type: 0
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): priv: 1
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): 
cli_pid: 7402
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100): logon 
name: qchang
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sss_ncache_check_str] (0x2000): 
Checking negative cache for [NCE/USER/mr.ric/qchang]
-----

On 04/13/2015 05:41 PM, Dmitri Pal wrote:
> On 04/13/2015 05:29 PM, Qing Chang wrote:
>> Thanks Lucas for the information.
>>
>> I tried the selinux line, it did not seem to make a difference.
>>
>> As I said in my original email, login to the IPA server itself does 
>> not exhibit the same behavior, although
>> every system has the same SSSD configuration and SElinux enabled. I 
>> actually tried "setenforce 0"
>> on a client without any effect either.
>>
>> I checked all the reference you provided, my feelings is that the 
>> events add up still would not account for 5 seconds delay:-(
>>
>> If anybody would like to have debug information, please let me know 
>> (the procedure to produce). Please also let me know if I should file 
>> a bug.
>
> Please see SSSD troubleshooting page. [1]
> Rise debug_level, inspect the logs and see what operation is really 
> taking the time.
>
> I suspect this there some DNS release timeout that you are hitting but 
> without logs it is not possible to say.
>
> [1] https://fedorahosted.org/sssd/wiki/Troubleshooting
>
>>
>> Many thanks,
>> Qing
>>
>> On Mon, Apr 13, 2015 at 4:22 PM, Lukas Slebodnik <lslebodn at redhat.com 
>> <mailto:lslebodn at redhat.com>> wrote:
>>
>>     On (13/04/15 15:28), Qing Chang wrote:
>>     >OS: CentoOS 7.1
>>     >IPA: 4.1.0-18
>>     >SSSD: 1.12.2-58
>>     >
>>     >With IPA any clients running CentOS7.1 authentication for ssh
>>     and sudo
>>     >takes more than 5 seconds _after_ putting in password. If ssh to
>>     the IPA
>>     >server itself, it authenticates instantly.
>>     >
>>     >Google did not provide much relevant information. Note that this
>>     is not a
>>     >slow ssh session to get to authentication prompt, it always gets
>>     to the
>>     >prompt without delay.
>>     >
>>     >Also it is not related to NFS performance, it is equally slow if
>>     I login to
>>     >a NFS server (IPA client) locally or login to a server (also a
>>     IPA client)
>>     >that has autofs home.
>>     >
>>     >IPA server is a fresh installation with just a couple of users.
>>     I had an
>>     >installation previously that has more than a thousand user
>>     accounts on
>>     >CentOS 6. Users did not have the slowness problem as with this new
>>     >installation.
>>     >
>>     >Hope this list can provide some pointers.
>>     >
>>     You might hit bug[1].
>>
>>     If you do not use SELinux ser mapping[2] you can try to disable
>>     this feature.
>>
>>     put "selinux_provider = none" into domain section of sssd.conf
>>
>>     If it doesn't help you can tahe a look on sssd<->systemd
>>     conversation in mail
>>     thread[3]
>>
>>     LS
>>
>>     [1] https://fedorahosted.org/sssd/ticket/2624
>>     [2] https://www.freeipa.org/page/SELinux_user_mapping
>>     [3]
>>     http://lists.freedesktop.org/archives/systemd-devel/2015-April/030496.html
>>     _______________________________________________
>>     sssd-users mailing list
>>     sssd-users at lists.fedorahosted.org
>>     <mailto:sssd-users at lists.fedorahosted.org>
>>     https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>>
>>
>>
>>
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
> -- 
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager IdM portfolio
> Red Hat, Inc.
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150414/3c4cadcc/attachment-0001.html>


More information about the sssd-users mailing list