<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I started with level 6 and went up to 10 with pretty much the same
logs.<br>
<br>
There is probably quite some noise, but look at the lines around the
gap <br>
from 13:05:06 to 13:05:08. That is about the duration of the delay.
<br>
Responders other than nss and pam did not log anything within that
time span.<br>
<br>
<br>
----- sssd_nss.log -----<br>
(Tue Apr 14 13:05:03 2015) [sssd[nss]] [sbus_handler_got_caller_id]
(0x4000): Received SBUS method [ping]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [17] with input [qchang].<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [qchang] from [<ALL>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0100): Requesting info for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b567300<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b568490<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b568490 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400):
Cached entry is valid, returning..<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [17] with input [qchang].<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [qchang] from [<ALL>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0100): Requesting info for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b567300<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b568490<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b568490 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400):
Cached entry is valid, returning..<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [17] with input [qchang].<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [qchang] from [<ALL>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0100): Requesting info for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b567300<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b568490<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b568490 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b567300 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400):
Cached entry is valid, returning..<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_dispatch] (0x4000):
dbus conn: 0x7f8a5b563dd0<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_dispatch] (0x4000):
Dispatching.<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_message_handler]
(0x4000): Received SBUS method [initgrCheck]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_get_sender_id_send]
(0x2000): Not a sysbus message, quit<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sbus_handler_got_caller_id]
(0x4000): Received SBUS method [initgrCheck]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_memcache_initgr_check]
(0x1000): Got request for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b567e20<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b574840<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b567e20 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b574840 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b567e20 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b567e20<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b56bf50<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b567e20 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b575580<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b575640<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b56bf50 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b567e20 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b575580 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b575640 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b575580 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [17] with input [qchang].<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [qchang] from [<ALL>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0100): Requesting info for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b5682c0<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b567e20<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b5682c0 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b567e20 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b5682c0 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400):
Cached entry is valid, returning..<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [17] with input [qchang].<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [qchang] from [<ALL>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0100): Requesting info for [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_callback": 0x7f8a5b56c920<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Added timed
event "ltdb_timeout": 0x7f8a5b574840<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Running timer
event 0x7f8a5b56c920 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Destroying
timer event 0x7f8a5b574840 "ltdb_timeout"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [ldb] (0x4000): Ending timer
event 0x7f8a5b56c920 "ltdb_callback"<br>
<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [check_cache] (0x0400):
Cached entry is valid, returning..<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [nss_cmd_getpwnam_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b56cc60][20]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [get_client_cred] (0x4000):
Client creds: euid[81] egid[81] pid[503].<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b574840][21]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [accept_fd_handler] (0x0400):
Client connected!<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b574840][21]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_cmd_get_version]
(0x0200): Received client version [1].<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_cmd_get_version]
(0x0200): Offered version [1].<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b574840][21]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f8a5b574840][21]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0400):
Running command [38] with input [root].<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_parse_name_for_domains]
(0x0200): name 'root' matched without domain, user is root<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_getbynam] (0x0100):
Requesting info for [root] from [<ALL>]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/root]<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0400): User [root] does not exist in [mr.ric]! (negative cache)<br>
(Tue Apr 14 13:05:08 2015) [sssd[nss]] [nss_cmd_initgroups_search]
(0x0080): No matching domain found for [root], fail!<br>
-----<br>
----- sssd_pam.log -----<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_check_user_search]
(0x0400): Returning info for user [<a class="moz-txt-link-abbreviated" href="mailto:qchang@mr.ric">qchang@mr.ric</a>]<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_dp_send_req] (0x0100):
Sending request with the following data:<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_ACCT_MGMT<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
domain: mr.ric<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
user: qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
tty: ssh<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
ruser: not set<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
rhost: 172.25.12.157<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
priv: 1<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7402<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_print_data] (0x0100):
logon name: qchang<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [sbus_add_timeout] (0x2000):
0x7f1aff4200a0<br>
(Tue Apr 14 13:05:06 2015) [sssd[pam]] [pam_dom_forwarder] (0x0100):
pam_dp_send_req returned 0<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_remove_timeout]
(0x2000): 0x7f1aff4200a0<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_dispatch] (0x4000):
dbus conn: 0x7f1aff41ddd0<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sbus_dispatch] (0x4000):
Dispatching.<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_dp_process_reply]
(0x0100): received: [0][mr.ric]<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_reply] (0x0200):
pam_reply called with result [0].<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_reply] (0x0200): blen:
23<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f1aff421b40][19]<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [reset_idle_timer] (0x4000):
Idle timer re-set for client [0x7f1aff421b40][19]<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_cmd_setcred] (0x0100):
entering pam_cmd_setcred<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sss_parse_name_for_domains]
(0x0200): name 'qchang' matched without domain, user is qchang<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
command: PAM_SETCRED<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
domain: not set<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
user: qchang<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
service: sshd<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
tty: ssh<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
ruser: not set<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
rhost: 172.25.12.157<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
authtok type: 0<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
newauthtok type: 0<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
priv: 1<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
cli_pid: 7402<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [pam_print_data] (0x0100):
logon name: qchang<br>
(Tue Apr 14 13:05:08 2015) [sssd[pam]] [sss_ncache_check_str]
(0x2000): Checking negative cache for [NCE/USER/mr.ric/qchang]<br>
-----<br>
<br>
<div class="moz-cite-prefix">On 04/13/2015 05:41 PM, Dmitri Pal
wrote:<br>
</div>
<blockquote cite="mid:552C3817.1000903@redhat.com" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<div class="moz-cite-prefix">On 04/13/2015 05:29 PM, Qing Chang
wrote:<br>
</div>
<blockquote
cite="mid:CAD+c6m=cT2a6hgrYcqo_vwDVVedJaFWTWKUvUV3FuAKie0nHdA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>Thanks Lucas for the information.<br>
<br>
</div>
I tried the selinux line, it did not seem to make a
difference. <br>
<br>
</div>
As I said in my original email, login to the IPA server
itself does not exhibit the same behavior, although <br>
every system has the same SSSD configuration and SElinux
enabled. I actually tried "setenforce 0"<br>
</div>
on a client without any effect either.<br>
<br>
</div>
<div>I checked all the reference you provided, my feelings is
that the events add up still would not account for 5 seconds
delay:-( <br>
<br>
</div>
<div>If anybody would like to have debug information, please
let me know (the procedure to produce). Please also let me
know if I should file a bug.<br>
</div>
</div>
</blockquote>
<br>
Please see SSSD troubleshooting page. [1]<br>
Rise debug_level, inspect the logs and see what operation is
really taking the time.<br>
<br>
I suspect this there some DNS release timeout that you are hitting
but without logs it is not possible to say.<br>
<br>
[1] <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://fedorahosted.org/sssd/wiki/Troubleshooting">https://fedorahosted.org/sssd/wiki/Troubleshooting</a><br>
<br>
<blockquote
cite="mid:CAD+c6m=cT2a6hgrYcqo_vwDVVedJaFWTWKUvUV3FuAKie0nHdA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Many thanks,<br>
</div>
<div>Qing<br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Apr 13, 2015 at 4:22 PM,
Lukas Slebodnik <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:lslebodn@redhat.com"
target="_blank">lslebodn@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb">
<div class="h5">On (13/04/15 15:28), Qing Chang wrote:<br>
>OS: CentoOS 7.1<br>
>IPA: 4.1.0-18<br>
>SSSD: 1.12.2-58<br>
><br>
>With IPA any clients running CentOS7.1
authentication for ssh and sudo<br>
>takes more than 5 seconds _after_ putting in
password. If ssh to the IPA<br>
>server itself, it authenticates instantly.<br>
><br>
>Google did not provide much relevant information.
Note that this is not a<br>
>slow ssh session to get to authentication prompt,
it always gets to the<br>
>prompt without delay.<br>
><br>
>Also it is not related to NFS performance, it is
equally slow if I login to<br>
>a NFS server (IPA client) locally or login to a
server (also a IPA client)<br>
>that has autofs home.<br>
><br>
>IPA server is a fresh installation with just a
couple of users. I had an<br>
>installation previously that has more than a
thousand user accounts on<br>
>CentOS 6. Users did not have the slowness problem
as with this new<br>
>installation.<br>
><br>
>Hope this list can provide some pointers.<br>
><br>
</div>
</div>
You might hit bug[1].<br>
<br>
If you do not use SELinux ser mapping[2] you can try to
disable<br>
this feature.<br>
<br>
put "selinux_provider = none" into domain section of
sssd.conf<br>
<br>
If it doesn't help you can tahe a look on
sssd<->systemd conversation in mail<br>
thread[3]<br>
<br>
LS<br>
<br>
[1] <a moz-do-not-send="true"
href="https://fedorahosted.org/sssd/ticket/2624"
target="_blank">https://fedorahosted.org/sssd/ticket/2624</a><br>
[2] <a moz-do-not-send="true"
href="https://www.freeipa.org/page/SELinux_user_mapping"
target="_blank">https://www.freeipa.org/page/SELinux_user_mapping</a><br>
[3] <a moz-do-not-send="true"
href="http://lists.freedesktop.org/archives/systemd-devel/2015-April/030496.html"
target="_blank">http://lists.freedesktop.org/archives/systemd-devel/2015-April/030496.html</a><br>
<div class="HOEnZb">
<div class="h5">_______________________________________________<br>
sssd-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
</body>
</html>