Slow auth

[Edgar Pettijohn]

Sent from my iPhone

> On Jun 7, 2016, at 11:07 AM, Ranbir <m3freak at thesandhufamily.ca> wrote:
> 
> Hi Everyone,
> 
> I'm running dovecot on a CentOS 7 box using PLAIN and GSSAPI auth. I
> need to use both because I have some clients that can't use GSSAPI.
> 
> I haven't been able to get the userdb working properly without a
> password file and a userdb file. For example, I have to set the home
> default and change the username_format.
> 
> I use FreeIPA and the dovecot server is joined properly to the realm.
> Authentication works (I don't have any passwords in the userdb file).
> 
> The problem is authentication is slow. When I use Roundcube, the login
> takes longer than it should. In fact, every operation (changing
> folders, opening an email, replying, etc.) is just slow. The web server
> where Roundcube is running is barely loaded, the dovecot server isn't
> loaded and the FreeIPA server is basically sitting idle.
> 
> When I watch /var/log/secure as I login to roundcube, I see this in the
> logs:
> 
> http://pastebin.ca/3620032
> 
> Why is pam_unix being hit and then pam_sss? I'm thinking the pam_unix
> failures are the reason why the auth is slow.
> 
You have Pam as your passdb driver.

> Here's the output from dovecot -n:
> 
> http://pastebin.ca/3620029
> 
> I'm sure I haven't configured something correctly, hence the
> performance problems.
> 
> Any help would be appreciated.
> 
> 
> -- 
> Ranbir