slow login with sssd and ldap config

Eric Doutreleau Eric.Doutreleau at it-sudparis.eu
Thu Jun 10 09:39:00 UTC 2010


i m trying to make sssd working with ldap server on my fedora 13 machine.
it works but the login is very very slow ( several minutes )
during this interval the process sssd_be is at 100% cpu time

here is my sssd.conf

[sssd]
config_file_version = 2

reconnection_retries = 3

services = nss, pam

domains = default
[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3

ldap_id_use_start_tls = False
ldap_tls_reqcert = never
cache_credentials = True
ldap_search_base = dc=int-evry,dc=fr
ldap_user_search_base = ou=People,dc=int-evry,dc=fr
chpass_provider = none
id_provider = ldap
auth_provider = ldap
debug_level = 5
min_id = 1
ldap_uri = ldap://ldap1.int-evry.fr/
ldap_schema = rfc2307
access_provider = ldap
ldap_access_filter = IntEPersInetServ=*unix-int*
ldap_default_bind_dn = cn=mcibind,ou=system,dc=int-evry,dc=fr
ldap_default_authtok_type = password
ldap_default_authtok = **********
enumerate=false

the direct ldap request is immediate

does someone know how to speed up the process?


More information about the users mailing list