[Freeipa-users] Slow logins on FreeIPA 4.1.2 (F21)

[Simo Sorce]

On Wed, 2015-04-08 at 10:11 +0200, Martin (Lists) wrote:
> Am 07.04.2015 um 18:27 schrieb Simo Sorce:
> > On Tue, 2015-04-07 at 17:57 +0200, Martin (Lists) wrote:
> >> Hallo
> >>
> >> attached you can find the data from krb_child.log. As far as I can see
> >> it, the three seconds are due to the communication with the kerberos
> >> server. (1.2.3.4 is my server).
> > 
> > Do you experience the same latency if you kinit manually ?
> > 
> > Simo.
> > 
> 
> No, kinit completes almost instantly after entering the password.

Any chance you can take a network trace when authenticating via sssd and
when authenticating via kinit ? It would be nice to see what differs
there and what operation exactly is taking longer.
Looking at the server krb5kdc.log may also shed some light.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York