Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Rafal Pietrak
W dniu 19.09.2017 o 19:41, Russ Allbery pisze: > Rafal Pietrak writes: > >> I did attempt that, but without success. > >> When I swapped krb5 entry with unix entry in common-password, nothing >> changes. When I did that in common-auth I've go "bad password" response >> from sudo command. > >

Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Russ Allbery
Rafal Pietrak writes: > I have this (default on debian-9 .. I haven't touched it before): > auth [success=2 default=ignore] pam_krb5.so minimum_uid=1000 > auth [success=1 default=ignore] pam_unix.so nullok_secure try_first_pass > which I've temporarily swapped ... and in consequence

Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Russ Allbery
Rafal Pietrak writes: > I did attempt that, but without success. > When I swapped krb5 entry with unix entry in common-password, nothing > changes. When I did that in common-auth I've go "bad password" response > from sudo command. You want common-auth, not common-password. Are you sure that y

Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Rafal Pietrak
Package: libpam-krb5 Version: 4.7-4 Severity: important Dear Maintainer, When connectivity is poor (like WiFi on the edge of range) checking of password can take VERY long time. It happens no matter if I login through GDM, or if I'm just unlocking the screen, or even if I'm just executing "sudo"