Slow auth [solved]

[Ranbir]

On Tue, 2016-06-07 at 11:24 -0700, Laz C. Peterson wrote:
> Or, you can also try PAM using Kerberos, instead of WInbind (or 
> whatever you are using with PAM).  Just a thought.

So I did a tad bit more research because I didn't want to configure
Dovecot to use LDAP. I wanted to use pam because the dovecot pam module
would continue to be used. It's just easier that way!

Anyway, I noticed this option for the pam driver in passdb:

cache_key=<key>

I ended up adding this to the "args" list:

cache_key=%u%n

I also set these:

auth_cache_size = 1024
auth_cache_ttl = 1 hour
auth_cache_negative_ttl = 0

Now Roundcube is flying again, just like it was before I made Dovecot
use FreeIPA. The slow auth issue is gone.

Thanks for listening!

-- 
Ranbir
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://dovecot.org/pipermail/dovecot/attachments/20160607/d661dbbf/attachment.sig>