-----BEGIN PGP SIGNED MESSAGE-----
On 04/11/2013 09:03 AM, Sutton, Harry (GSSE) wrote:
On 04/11/2013 08:44 AM, Stephen Gallagher wrote:
> Also, try the following experiment:
> time id -G <localuser>
> and show me the output.
On the Fedora laptop:
real 0m58.014s user 0m0.001s sys 0m0.007s
On the RHEL workstation:
real 0m58.012s user 0m0.001s sys 0m0.001s
Ok, that definitely is showing where the problem lies. This strongly
suggests to me that you have a user in your LDAP with the same name as
on your local system. What's most likely happening is that the
initgroups() call internally is walking through and processing all of
the potential groups that username belongs to.
Can you check whether
getent -s sss passwd <localuser>
Returns anything? If it does, you have an overlap and should probably
resolve it on one side or the other.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
-----END PGP SIGNATURE-----