Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread Jakub Hrozek
On Tue, Jun 02, 2015 at 09:09:46PM +0100, Ivars Strazdiņš wrote: > > > On 2. jūn. 2015, at 19:15, Jakub Hrozek wrote: > > > > selinux_provider = none > > I've got immediate and noticeable improvement in ssh login times and webmail > responses. Thanks, that confirms you're hitting https://bugz

Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread Ivars Strazdiņš
> On 2. jūn. 2015, at 19:15, Jakub Hrozek wrote: > > selinux_provider = none I've got immediate and noticeable improvement in ssh login times and webmail responses. What exactly is missing when host runs sssd with "selinux_provider = none” ? To put it otherwise - will postfix and dovecot run

Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread Jakub Hrozek
On Tue, Jun 02, 2015 at 07:05:21PM +0200, John Obaterspok wrote: > 2015-06-02 12:11 GMT+02:00 Jakub Hrozek : > > > On Tue, Jun 02, 2015 at 10:28:29AM +0100, Ivars Strazdiņš wrote: > > > > > > > > > > > > Ar laipniem sveicieniem, > > > Ivars Strazdiņš > > > > > > > On 2. jūn. 2015, at 07:21, Lukas

Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread John Obaterspok
2015-06-02 12:11 GMT+02:00 Jakub Hrozek : > On Tue, Jun 02, 2015 at 10:28:29AM +0100, Ivars Strazdiņš wrote: > > > > > > > > Ar laipniem sveicieniem, > > Ivars Strazdiņš > > > > > On 2. jūn. 2015, at 07:21, Lukas Slebodnik > wrote: > > > > > > How many groups does problematic user have? > > > > I

Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread Jakub Hrozek
On Tue, Jun 02, 2015 at 10:28:29AM +0100, Ivars Strazdiņš wrote: > > > > Ar laipniem sveicieniem, > Ivars Strazdiņš > > > On 2. jūn. 2015, at 07:21, Lukas Slebodnik wrote: > > > > How many groups does problematic user have? > > I can call any user problematic, because all have login delays.

Re: [Freeipa-users] login delay with sssd

2015-06-02 Thread Ivars Strazdiņš
Ar laipniem sveicieniem, Ivars Strazdiņš > On 2. jūn. 2015, at 07:21, Lukas Slebodnik wrote: > > How many groups does problematic user have? I can call any user problematic, because all have login delays. sitaadmin user, being able to to login via ssh, probably has most groups - 4. Doesn’t

Re: [Freeipa-users] login delay with sssd

2015-06-01 Thread Lukas Slebodnik
On (01/06/15 15:42), Ivars Strazdiņš wrote: >Hi, >how could I possibly trace why there is a noticeable delay when logging into >sssd enabled server? >With ssh there is a 2-3 second delay before users logs in. But most users >notice this with webmail, which uses dovecot->pam->sssd as authenticatio

Re: [Freeipa-users] login delay with sssd

2015-06-01 Thread Jakub Hrozek
On Mon, Jun 01, 2015 at 03:42:53PM +0100, Ivars Strazdiņš wrote: > Hi, > how could I possibly trace why there is a noticeable delay when logging into > sssd enabled server? Using SSSD logs: https://fedorahosted.org/sssd/wiki/Troubleshooting > With ssh there is a 2-3 second delay before users

[Freeipa-users] login delay with sssd

2015-06-01 Thread Ivars Strazdiņš
Hi, how could I possibly trace why there is a noticeable delay when logging into sssd enabled server? With ssh there is a 2-3 second delay before users logs in. But most users notice this with webmail, which uses dovecot->pam->sssd as authentication backend. Environment is Centos 7.1 and FreeIPA