very slow login (60 second timeout exceeded)
 

Hi, I upgraded world on my Gentoo amd64 box (pam 1.1.3 was in there) and since then su, sudo and login take a very long time. Such that for certain users the 60 second timeout is exceeded even before it prompts for a password, and kdm won't log in either. From my research, I get the impression that it could be related to some DNS lookup. However, even with a disconnected cable, stopped network serivces and empty resolv.conf, the problem still persists. I'm open to any suggestions. (I did run revdep-rebuild)

PS : I upgraded another amd64 box, and there are no issues there...

Thanks,
Serafean

I would install sar and set it up to run automatically. sar reports can be very helpful when diagnosing performance problems. It always runs in the background and makes very detailed reports of resource usage.

Also you can look at the /var/log/messages file to see if there are any problems reported. You can increase the log level of various software components to report more or less detail about their function.

Hi, thanks for the tip with sar I'll definitely be using more of that.

As to my problem, looking very closely at /var/log/messages I saw "krb5_parse_name failed". It would appear that the "kerberos" use flag crept into pambase, and that was the reason of slow logins.

just curious, what advantage would I get using kerberos?

Thanks

Serafean

Kerberos is used for single-sign-on. It has been in use for a long time in the UNIX world. Microsoft has adopted it for NT LAN Manager 2 authentication. NTLM2 is used in Microsoft networks on computers running Microsoft Server 2003 or later.