<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 05/22/2014 09:43 AM, Bret Wortman
wrote:<br>
</div>
<blockquote cite="mid:537DFEF2.5020602@damascusgrp.com" type="cite">What
we're seeing is slow GDM logins, ssh authentications, and "sudo
-i" responses on this network. On our other, these things are all
blazing fast. Here, they're on the order of 5-10 seconds. And it
doesn't seem to improve (much) with age or time, except perhaps
anecdotally. At best, a second connection might be a second
faster, but will revert within an hour or so.
<br>
<br>
</blockquote>
<br>
Have you compared sssd.conf from clients in these two networks?<br>
Do you use enumeration?<br>
<br>
Increasing debug level and looking at the logs will help you to
understand what part takes most time. These logs will be helpful for
you/us to see if/what the problem is/are.<br>
<br>
<blockquote cite="mid:537DFEF2.5020602@damascusgrp.com" type="cite">
<br>
On 05/22/2014 09:36 AM, Rob Crittenden wrote:
<br>
<blockquote type="cite">Bret Wortman wrote:
<br>
<blockquote type="cite">Where should my clients be getting the
contents of /etc/openldap/certs from?
<br>
<br>
I've got one network where my IPA authentications are blazing
fast and
<br>
one where they're ... not. On the slower one, clients'
<br>
/etc/openldap/certs directories are either missing or empty;
on the
<br>
faster network, clients have certs in these directories.
<br>
<br>
Is this important, and if so what could be going wrong on my
slower
<br>
network that might cause the certs to not get distributed or
created
<br>
properly?
<br>
</blockquote>
These are not the droids you are looking for...
<br>
<br>
Can you clarify what you mean by IPA authentications? sssd
should be
<br>
handling that, and while a first auth over a slow link might be
slow
<br>
subsequent usage should be quite fast.
<br>
<br>
rob
<br>
</blockquote>
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>