Sure: (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [main] (0x0400): krb5_child started. (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [unpack_buffer] (0x1000): total buffer size: [125] (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [unpack_buffer] (0x0100): cmd [241] uid [799001323] gid [799001323] validate [true] offline [false] UPN [sdain...@miovision.corp] (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_799001323_zWaW2Z] keytab: [/etc/krb5.keytab] (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [krb5_child_setup] (0x0400): Will perform online auth (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [krb5_child_setup] (0x0100): Not using FAST. (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [MIOVISION.CORP] (Mon Feb 10 10:14:58 2014) [[sssd[krb5_child[9879]]]] [validate_tgt] (0x0400): TGT verified using key for [host/snapshot-test.miolinux.c...@miolinux.corp]. (Mon Feb 10 10:15:06 2014) [[sssd[krb5_child[9879]]]] [become_user] (0x0200): Trying to become user [799001323][799001323]. (Mon Feb 10 10:15:06 2014) [[sssd[krb5_child[9879]]]] [create_ccache_file] (0x0200): Creating ccache at [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:15:06 2014) [[sssd[krb5_child[9879]]]] [create_ccache_file] (0x1000): Created ccache file: [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:15:06 2014) [[sssd[krb5_child[9879]]]] [prepare_response_message] (0x0400): Building response for result [0] (Mon Feb 10 10:15:06 2014) [[sssd[krb5_child[9879]]]] [main] (0x0400): krb5_child completed successfully (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [main] (0x0400): krb5_child started. (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [unpack_buffer] (0x1000): total buffer size: [125] (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [unpack_buffer] (0x0100): cmd [241] uid [799001323] gid [799001323] validate [true] offline [false] UPN [sdain...@miovision.corp] (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_799001323_zWaW2Z] keytab: [/etc/krb5.keytab] (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [krb5_child_setup] (0x0400): Will perform online auth (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [krb5_child_setup] (0x0100): Not using FAST. (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Feb 10 10:16:34 2014) [[sssd[krb5_child[9929]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [MIOVISION.CORP] (Mon Feb 10 10:16:35 2014) [[sssd[krb5_child[9929]]]] [validate_tgt] (0x0400): TGT verified using key for [host/snapshot-test.miolinux.c...@miolinux.corp]. (Mon Feb 10 10:16:40 2014) [[sssd[krb5_child[9929]]]] [become_user] (0x0200): Trying to become user [799001323][799001323]. (Mon Feb 10 10:16:40 2014) [[sssd[krb5_child[9929]]]] [create_ccache_file] (0x0200): Creating ccache at [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:16:40 2014) [[sssd[krb5_child[9929]]]] [create_ccache_file] (0x1000): Created ccache file: [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:16:40 2014) [[sssd[krb5_child[9929]]]] [prepare_response_message] (0x0400): Building response for result [0] (Mon Feb 10 10:16:40 2014) [[sssd[krb5_child[9929]]]] [main] (0x0400): krb5_child completed successfully (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [main] (0x0400): krb5_child started. (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [unpack_buffer] (0x1000): total buffer size: [125] (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [unpack_buffer] (0x0100): cmd [241] uid [799001323] gid [799001323] validate [true] offline [false] UPN [sdain...@miovision.corp] (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_799001323_zWaW2Z] keytab: [/etc/krb5.keytab] (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [krb5_child_setup] (0x0400): Will perform online auth (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [krb5_child_setup] (0x0100): Not using FAST. (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [MIOVISION.CORP] (Mon Feb 10 10:16:57 2014) [[sssd[krb5_child[9960]]]] [validate_tgt] (0x0400): TGT verified using key for [host/snapshot-test.miolinux.c...@miolinux.corp]. (Mon Feb 10 10:17:01 2014) [[sssd[krb5_child[9960]]]] [become_user] (0x0200): Trying to become user [799001323][799001323]. (Mon Feb 10 10:17:01 2014) [[sssd[krb5_child[9960]]]] [create_ccache_file] (0x0200): Creating ccache at [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:17:01 2014) [[sssd[krb5_child[9960]]]] [create_ccache_file] (0x1000): Created ccache file: [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:17:01 2014) [[sssd[krb5_child[9960]]]] [prepare_response_message] (0x0400): Building response for result [0] (Mon Feb 10 10:17:01 2014) [[sssd[krb5_child[9960]]]] [main] (0x0400): krb5_child completed successfully (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [main] (0x0400): krb5_child started. (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [unpack_buffer] (0x1000): total buffer size: [125] (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [unpack_buffer] (0x0100): cmd [241] uid [799001323] gid [799001323] validate [true] offline [false] UPN [sdain...@miovision.corp] (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_799001323_zWaW2Z] keytab: [/etc/krb5.keytab] (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [krb5_child_setup] (0x0400): Will perform online auth (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [krb5_child_setup] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [krb5_child_setup] (0x0100): Not using FAST. (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Feb 10 10:17:29 2014) [[sssd[krb5_child[10018]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [MIOVISION.CORP] (Mon Feb 10 10:17:30 2014) [[sssd[krb5_child[10018]]]] [validate_tgt] (0x0400): TGT verified using key for [host/snapshot-test.miolinux.c...@miolinux.corp]. (Mon Feb 10 10:17:34 2014) [[sssd[krb5_child[10018]]]] [become_user] (0x0200): Trying to become user [799001323][799001323]. (Mon Feb 10 10:17:34 2014) [[sssd[krb5_child[10018]]]] [create_ccache_file] (0x0200): Creating ccache at [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:17:35 2014) [[sssd[krb5_child[10018]]]] [create_ccache_file] (0x1000): Created ccache file: [FILE:/tmp/krb5cc_799001323_zWaW2Z] (Mon Feb 10 10:17:35 2014) [[sssd[krb5_child[10018]]]] [prepare_response_message] (0x0400): Building response for result [0] (Mon Feb 10 10:17:35 2014) [[sssd[krb5_child[10018]]]] [main] (0x0400): krb5_child completed successfully
*Steve Dainard * IT Infrastructure Manager Miovision <http://miovision.com/> | *Rethink Traffic* 519-513-2407 ex.250 877-646-8476 (toll-free) *Blog <http://miovision.com/blog> | **LinkedIn <https://www.linkedin.com/company/miovision-technologies> | Twitter <https://twitter.com/miovision> | Facebook <https://www.facebook.com/miovision>* ------------------------------ Miovision Technologies Inc. | 148 Manitou Drive, Suite 101, Kitchener, ON, Canada | N2C 1L3 This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately. On Mon, Feb 10, 2014 at 11:09 AM, Sumit Bose <sb...@redhat.com> wrote: > On Mon, Feb 10, 2014 at 10:55:33AM -0500, Steve Dainard wrote: > > I've setup RHEL 7 beta IPA with a trust to an AD domain. > > > > When I use an AD domain login it takes roughly 9-14 seconds to get to a > > shell after entering a password. Is there any way to speed this process > up? > > I thought supplemental logins would be quicker, but the login time is the > > same. This is either via console, or via ssh@localhost or ssh over the > > network. > > at a first glace I would say that the delay is in krb5_child. Can you > send this log file as well? > > bye, > Sumit > > > > > IPA realm = miolinux.corp > > DC domain/forest = miovision.corp > > > > ... > > > (Mon Feb 10 10:17:29 2014) [sssd[be[miolinux.corp]]] [write_pipe_handler] > > (0x0400): All data has been sent! > > ... > > > *(Mon Feb 10 10:17:35 2014) [sssd[be[miolinux.corp]]] [read_pipe_handler] > > (0x0400): EOF received, client finished* > > > > _______________________________________________ > Freeipa-users mailing list > Freeipa-users@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users >
_______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
