Logins with pam_ldap take 10sec

[Jung, Jochen]

Hi there,

I finaly got the authentication with pam_ldap against our ActiveDirectory server to work.
But now I'm facing the problem, that the logins take quite long.

After the prompt for the username, it takes about 10sec, till the password prompt is displayed.
Has anyone an idea what the reason for this could be? The machines are connected over a LAN, so there should be no speed problems.

I figured out, that the 10sec are about the same, a DNS request takes, if the record could not be found.
Thats why I tried to replace the hostnames inside the /etc/ldap.conf with the corresponding IP numbers. But it didn't help.

Anyone an idea, what went wrong?

Regards, Jochen.

[dstensrud]

What does your nsswitch.conf look like?  Also are you logging in at the
machine or is this an ssh connection.. etc...

Jung, Jochen wrote:

> Hi there,
>
> I finaly got the authentication with pam_ldap against our ActiveDirectory server to work.
> But now I'm facing the problem, that the logins take quite long.
>
> After the prompt for the username, it takes about 10sec, till the password prompt is displayed.
> Has anyone an idea what the reason for this could be? The machines are connected over a LAN, so there should be no speed problems.
>
> I figured out, that the 10sec are about the same, a DNS request takes, if the record could not be found.
> Thats why I tried to replace the hostnames inside the /etc/ldap.conf with the corresponding IP numbers. But it didn't help.
>
> Anyone an idea, what went wrong?
>
> Regards, Jochen.
>
>  

[Nick Sonneveld]

Hi Jochen,

Try turning off the service NSCD.  I've had troubles with it at work
here where ldap lookups took ages.  Fortunately, there's a direct link
from the machine to the ldap server so I probably didn't need it anyway.

- Nick

Jung, Jochen wrote:

> Hi there,
>
> I finaly got the authentication with pam_ldap against our ActiveDirectory server to work.
> But now I'm facing the problem, that the logins take quite long.
>
> After the prompt for the username, it takes about 10sec, till the password prompt is displayed.
> Has anyone an idea what the reason for this could be? The machines are connected over a LAN, so there should be no speed problems.
>
> I figured out, that the 10sec are about the same, a DNS request takes, if the record could not be found.
> Thats why I tried to replace the hostnames inside the /etc/ldap.conf with the corresponding IP numbers. But it didn't help.
>
> Anyone an idea, what went wrong?
>
> Regards, Jochen.

--
Nick Sonneveld  |  Nicholas.Sonneveld@...
IT Resources, University of Tasmania, Private Bag 69, Hobart Tas 7001
[phone]  |  0407 336 309  |  Fax [phone]