Hello, the IPA Infrastructure at my company is quite big and the performance of the login varies from acceptable to unacceptable. We are aware of the performance tuning guide by jhrozek, but it did not improve the performance in our case. In order to analyze our setup, we pinned one random IPA client onto one IPA Server in sssd.conf and started with debug_level=6 in all config sections. After deleting the cache on both machines and restarting the sssd service, the login with our AD-User on the IPA server works right away. Whereas, the client takes up to ~10 minutes before the login with our AD Account works at all. How long does it take the IPA Server on average to start up and serve client requests ?
After a successful login on the client, the performance is acceptable (~2s) for some time. On the next day the performace of the first login becomes quite slow again (up to 30s and more). As IPA beginner I am to some extent overwhelmed by the sheer mass of logs and I'd be glad if you point me towards the right direction. Thanks Georg _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
