Hello, We need help debugging this issue.
For some servers we're experiencing over 10 second delay logging in with IPA user. Since the issue isn't present everywhere we're finding it hard to debug. SSSD config looks like this:: [domain/hostname.com] cache_credentials = true krb5_store_password_if_offline = true ipa_domain = hostname.com id_provider = ipa auth_provider = ipa access_provider = ipa ldap_tls_cacert = /etc/ipa/ca.crt ipa_hostname = hostname.com chpass_provider = ipa dyndns_update = True ipa_server = ipa1-hostname, ipa2-hostname dyndns_iface = eth0 dns_discovery_domain = hostname.com debug_level = 9 [sssd] services = nss, sudo, pam, ssh domains = hostname.com [nss] homedir_substring = /home [pam] [sudo] [autofs] [ssh] [pac] [ifp] [secrets] [session_recording] We're wondering if there's any obvious configurations we could apply above that would improve SSSD performance, and what exactly to look out for in sssd debug logs that would help us with our investigation. Thanks _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
