On Wed, 2015-04-08 at 10:11 +0200, Martin (Lists) wrote: > Am 07.04.2015 um 18:27 schrieb Simo Sorce: > > On Tue, 2015-04-07 at 17:57 +0200, Martin (Lists) wrote: > >> Hallo > >> > >> attached you can find the data from krb_child.log. As far as I can see > >> it, the three seconds are due to the communication with the kerberos > >> server. (1.2.3.4 is my server). > > > > Do you experience the same latency if you kinit manually ? > > > > Simo. > > > > No, kinit completes almost instantly after entering the password.
Any chance you can take a network trace when authenticating via sssd and when authenticating via kinit ? It would be nice to see what differs there and what operation exactly is taking longer. Looking at the server krb5kdc.log may also shed some light. Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
