Re: DS_FORCE_REDISCOVERY lookup slows ssh logon

2013-06-11 Thread Corinna Vinschen
Daniel? Ping? On Jun 8 21:02, Corinna Vinschen wrote: On Jun 8 20:47, Corinna Vinschen wrote: Actually, the problem you have is based on the fact that you're using a machine-local cyg_server account to run sshd. In domain environments it's prudent to create such an account in AD and

DS_FORCE_REDISCOVERY lookup slows ssh logon

2013-06-08 Thread Daniel Colascione
In sec_auth.cc, get_server_groups contains this clause: if (get_logon_server (domain, server, false) !get_user_groups (server, grp_list, user, domain) get_logon_server (domain, server, true)) get_user_groups (server, grp_list, user, domain); The first call to get_logon_server

Re: DS_FORCE_REDISCOVERY lookup slows ssh logon

2013-06-08 Thread Daniel Colascione
On 6/7/2013 11:55 PM, Daniel Colascione wrote: (By the way: how on earth does logon eventually succeed if group enumeration fails? I'm using the stored-password authentication method, and when sshd eventually connects, my user (according to whoami.exe /priv) is a member of the groups I

Re: DS_FORCE_REDISCOVERY lookup slows ssh logon

2013-06-08 Thread Corinna Vinschen
On Jun 8 01:33, Daniel Colascione wrote: On 6/7/2013 11:55 PM, Daniel Colascione wrote: (By the way: how on earth does logon eventually succeed if group enumeration fails? I'm using the stored-password authentication method, and when sshd eventually connects, my user (according to

Re: DS_FORCE_REDISCOVERY lookup slows ssh logon

2013-06-08 Thread Corinna Vinschen
On Jun 8 20:47, Corinna Vinschen wrote: On Jun 8 01:33, Daniel Colascione wrote: On 6/7/2013 11:55 PM, Daniel Colascione wrote: (By the way: how on earth does logon eventually succeed if group enumeration fails? I'm using the stored-password authentication method, and when sshd