[OpenAFS] Slow Logins on RHEL 4

[Jerome Asselin]

I'm testing OpenAFS 1.3.84 on RHEL 4 with the same kernel 2.6.9-11.ELsmp
on x86_64. Logins are fast. Unfortunately, I don't use Kerberos; I use
OpenLDAP. My /etc/pam.d/system-auth is setup with:

auth        requisite     /lib/security/$ISA/pam_ldap.so use_first_pass
auth        sufficient    /lib/security/$ISA/pam_afs.so try_first_pass
ignore_root

I've also needed to setup the option
  UsePrivilegeSeparation no
in /etc/ssh/sshd_config, otherwise I couldn't SSH.
 
In order to solve your problem, I suggest you look for hints in
your /var/log/messages or other authentication log files. Look also
under /usr/afs/logs...

Jerome

On Thu, 2005-06-16 at 11:02 -0400, Jack Neely wrote:
> Folks,
> 
> I'm seeing slow logins on RHEL 4.  My current configuration is OpenAFS
> 1.3.84 and kernel version 2.6.9-11.ELsmp.  I also see the same problem
> on earlier RHEL 4 kernels, non-smp machines, and earlier releases of
> OpenAFS.
> 
> If I shutdown AFS (login scripts create users a temporary home
> directory) then logins are quite quick.  With AFS they take a good 5 to
> 15 seconds.
> 
> I've checked my PAM configuration.  No slow downs there.  It auths me
> and opens my session pretty quick.  Also don't have any problems getting
> tokens.  I get the same slow performance with either memcache or
> diskcache.  Console logins, GDM, SSH...all slow.
> 
> Any suggestions for locating the cause of this?
> 
> Thanks!
> Jack Neely
> 
-- 
Jerome Asselin, Agent de recherche, RHCE
CHUM -- Centre de recherche
3875 rue St-Urbain, 3e etage // Montreal QC  H2W 1V1
Tel.: 514-890-8000 Poste 15914; Fax: 514-412-7106