[Freeipa-users] Slow logins on FreeIPA 4.1.2 (F21)

[Jakub Hrozek]

On Wed, Apr 08, 2015 at 10:11:01AM +0200, Martin (Lists) wrote:
> Am 07.04.2015 um 18:27 schrieb Simo Sorce:
> > On Tue, 2015-04-07 at 17:57 +0200, Martin (Lists) wrote:
> >> Hallo
> >>
> >> attached you can find the data from krb_child.log. As far as I can see
> >> it, the three seconds are due to the communication with the kerberos
> >> server. (1.2.3.4 is my server).
> > 
> > Do you experience the same latency if you kinit manually ?
> > 
> > Simo.
> > 
> 
> No, kinit completes almost instantly after entering the password.
> 
> Martin

Can you run:
    KRB5_TRACE=/dev/stderr kinit yourprinc at YOUR.REALM

So that we can compare with the krb5_child.log you sent earlier? I
wonder if SSSD talks to a KDC that is slower or far away from your
client..