[Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

[Jakub Hrozek]

On Thu, Mar 19, 2015 at 11:05:45AM -0400, Gould, Joshua wrote:
> I¹m seeing ssh logins for AD users take MUCH longer when using SID mapping
> vs. POSIX attributes. Both myself and our AD admin would prefer to use SID
> mapping. It appears tied to the group lookup at login. There seem to be
> many posts about it, but I haven¹t found anything to help much. sssd pegs
> the CPU for the 15 or so seconds the login takes.

You haven't said what OS or release are you running, but for 7.0 I have
test packages with a proposed enhancement Sumit wrote:
    https://jhrozek.fedorapeople.org/sssd-test-builds/sssd-7.0-login-speedup/

Please include the versions of the problematic packages in the future
requests for troubleshooting.