On Wed, Apr 08, 2015 at 10:11:01AM +0200, Martin (Lists) wrote: > Am 07.04.2015 um 18:27 schrieb Simo Sorce: > > On Tue, 2015-04-07 at 17:57 +0200, Martin (Lists) wrote: > >> Hallo > >> > >> attached you can find the data from krb_child.log. As far as I can see > >> it, the three seconds are due to the communication with the kerberos > >> server. (1.2.3.4 is my server). > > > > Do you experience the same latency if you kinit manually ? > > > > Simo. > > > > No, kinit completes almost instantly after entering the password. > > Martin
Can you run: KRB5_TRACE=/dev/stderr kinit yourprinc@YOUR.REALM So that we can compare with the krb5_child.log you sent earlier? I wonder if SSSD talks to a KDC that is slower or far away from your client.. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project