[SSSD-users] authentication against IPA with SSSD takes long (more than 5 seconds)

tmpchq tmpchq at gmail.com
Wed Apr 15 18:50:31 UTC 2015


I was ssh'ing with with password authentication.


On 04/15/2015 02:46 PM, Jakub Hrozek wrote:
> On Wed, Apr 15, 2015 at 02:36:32PM -0400, tmpchq wrote:
>> I noticed that when login to IPA server (mripa1) itself, the only PAM
>> process is PAM_OPEN_SESSION,
>> whereas for mripadm it goes through 5: PAM_AUTHENTICATE, PAM_ACCT_MGMT,
>> PAM_SETCRED,
>> PAM_OPEN_SESSION, PAM_SETCRED in that order. I have virtually identical SSSD
>> and PAM config
>> for both servers...
> how exactly did you login? In the case where only session was called,
> did you maybe su from root or ssh-ed with GSSAPI? Both cases bypass
> SSSD..
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users



More information about the sssd-users mailing list