Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-20 Thread Jakub Hrozek
On Fri, Mar 20, 2015 at 09:41:08AM -0400, Gould, Joshua wrote: Updated: libipa_hbac.x86_64 0:1.12.2-58.el7_1.6.1 libipa_hbac-python.x86_64 0:1.12.2-58.el7_1.6.1 libsss_idmap.x86_64 0:1.12.2-58.el7_1.6.1 libsss_nss_idmap.x86_64 0:1.12.2-58.el7_1.6.1 libsss_nss_idmap-python.x86_64

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-20 Thread Gould, Joshua
Updated: libipa_hbac.x86_64 0:1.12.2-58.el7_1.6.1 libipa_hbac-python.x86_64 0:1.12.2-58.el7_1.6.1 libsss_idmap.x86_64 0:1.12.2-58.el7_1.6.1 libsss_nss_idmap.x86_64 0:1.12.2-58.el7_1.6.1 libsss_nss_idmap-python.x86_64 0:1.12.2-58.el7_1.6.1 python-sssdconfig.noarch 0:1.12.2-58.el7_1.6.1

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Jakub Hrozek
I'm running a bit out of time today, but I'll be doing some 7.1 builds tomorrow anyway, so I'll spin up the test package for you. On 19 Mar 2015, at 16:31, Gould, Joshua joshua.go...@osumc.edu wrote: RHEL 7.0 fully up to date. sssd-krb5-common-1.12.2-58.el7.x86_64

[Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Gould, Joshua
I¹m seeing ssh logins for AD users take MUCH longer when using SID mapping vs. POSIX attributes. Both myself and our AD admin would prefer to use SID mapping. It appears tied to the group lookup at login. There seem to be many posts about it, but I haven¹t found anything to help much. sssd pegs

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Gould, Joshua
RHEL 7.0 fully up to date. sssd-krb5-common-1.12.2-58.el7.x86_64 sssd-ipa-1.12.2-58.el7.x86_64 sssd-1.12.2-58.el7.x86_64 sssd-tools-1.12.2-58.el7.x86_64 sssd-common-1.12.2-58.el7.x86_64 sssd-ad-1.12.2-58.el7.x86_64 sssd-krb5-1.12.2-58.el7.x86_64 sssd-ldap-1.12.2-58.el7.x86_64

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Jakub Hrozek
On Thu, Mar 19, 2015 at 11:31:16AM -0400, Gould, Joshua wrote: RHEL 7.0 fully up to date. Are you sure? Looks like 7.1 to me based on the NVRs. sssd-krb5-common-1.12.2-58.el7.x86_64 sssd-ipa-1.12.2-58.el7.x86_64 sssd-1.12.2-58.el7.x86_64 sssd-tools-1.12.2-58.el7.x86_64

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Jakub Hrozek
On Thu, Mar 19, 2015 at 11:05:45AM -0400, Gould, Joshua wrote: I¹m seeing ssh logins for AD users take MUCH longer when using SID mapping vs. POSIX attributes. Both myself and our AD admin would prefer to use SID mapping. It appears tied to the group lookup at login. There seem to be many

Re: [Freeipa-users] Really slow logins with AD SID Mapping vs. POSIX

2015-03-19 Thread Gould, Joshua
logins with AD SID Mapping vs. POSIX On Thu, Mar 19, 2015 at 11:31:16AM -0400, Gould, Joshua wrote: RHEL 7.0 fully up to date. Are you sure? Looks like 7.1 to me based on the NVRs. sssd-krb5-common-1.12.2-58.el7.x86_64 sssd-ipa-1.12.2-58.el7.x86_64 sssd-1.12.2-58.el7.x86_64 sssd-tools