[Petter Reinholdtsen] > The login when sssd is enabled can be very slow, taking minutes, if > the user is a member of a group with many members. See > <URL:https://bugzilla.redhat.com/show_bug.cgi?id=617623> for details > and a reference to a fix.
I tested version 1.2.3 and this problem is solved there. But the group setting after logging in is incomplete (tested using 'id') are incomplete when logging in on a freshly installed system. So we might have to choose if we want logins that can take 20 minutes with large groups or incomplete group settings for logged in users. For roaming laptops without NFS mounts the incomplete groups is not a serious problem. For machines that use NFS, it is. The config had enumeration turned off. Suspect switching it on might help, but it is not an option with my LDAP server that do not allow enumeration. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
