Hi Everyone,
I'm running dovecot on a CentOS 7 box using PLAIN and GSSAPI auth. I need to use both because I have some clients that can't use GSSAPI.
I haven't been able to get the userdb working properly without a password file and a userdb file. For example, I have to set the home default and change the username_format.
I use FreeIPA and the dovecot server is joined properly to the realm. Authentication works (I don't have any passwords in the userdb file).
The problem is authentication is slow. When I use Roundcube, the login takes longer than it should. In fact, every operation (changing folders, opening an email, replying, etc.) is just slow. The web server where Roundcube is running is barely loaded, the dovecot server isn't loaded and the FreeIPA server is basically sitting idle.
When I watch /var/log/secure as I login to roundcube, I see this in the logs:
Why is pam_unix being hit and then pam_sss? I'm thinking the pam_unix failures are the reason why the auth is slow.
Here's the output from dovecot -n:
I'm sure I haven't configured something correctly, hence the performance problems.
Any help would be appreciated.
-- Ranbir