On Mon, Apr 13, 2015 at 05:41:43PM -0400, Dmitri Pal wrote:
On 04/13/2015 05:29 PM, Qing Chang wrote:
>Thanks Lucas for the information.
>I tried the selinux line, it did not seem to make a difference.
>As I said in my original email, login to the IPA server itself does not
>exhibit the same behavior, although
>every system has the same SSSD configuration and SElinux enabled. I
>actually tried "setenforce 0"
>on a client without any effect either.
>I checked all the reference you provided, my feelings is that the events
>add up still would not account for 5 seconds delay:-(
>If anybody would like to have debug information, please let me know (the
>procedure to produce). Please also let me know if I should file a bug.
Please see SSSD troubleshooting page. 
Rise debug_level, inspect the logs and see what operation is really taking
I suspect this there some DNS release timeout that you are hitting but
without logs it is not possible to say.
Right. Also, are those IPA users or AD users through trusts? (I suspect