[Freeipa-users] RHEL 7 beta trust - slow domain user authentication to Linux hosts

[Sumit Bose]

On Mon, Feb 10, 2014 at 10:55:33AM -0500, Steve Dainard wrote:
> I've setup RHEL 7 beta IPA with a trust to an AD domain.
> 
> When I use an AD domain login it takes roughly 9-14 seconds to get to a
> shell after entering a password. Is there any way to speed this process up?
> I thought supplemental logins would be quicker, but the login time is the
> same. This is either via console, or via ssh at localhost or ssh over the
> network.

at a first glace I would say that the delay is in krb5_child. Can you
send this log file as well?

bye,
Sumit

> 
> IPA realm = miolinux.corp
> DC domain/forest = miovision.corp
> 

...

> (Mon Feb 10 10:17:29 2014) [sssd[be[miolinux.corp]]] [write_pipe_handler]
> (0x0400): All data has been sent!

...

> *(Mon Feb 10 10:17:35 2014) [sssd[be[miolinux.corp]]] [read_pipe_handler]
> (0x0400): EOF received, client finished*
>