[OpenAFS] slow pw-krb auth when afs is running, instant when ssh keys or afs not running

Harald Barth haba@kth.se
Thu, 03 Feb 2011 12:35:00 +0100 (CET)


Does it make any difference if you forward X11 or not?

If it makes a difference, it might be xauth which tries to write the
~/.Xauthority for the user and fails because it is tried before the
token is there. In that case I think something like

/etc/pam.d/sshd:
session         optional        pam_mkstemp_env.so envname=XAUTHORITY envtemplate=/tmp/.Xauthority.XXXXXX

could help.

I have had success in starting sshd in debug mode and very verbose and
under strace -f on the server and then looking where the pause occurs.

Harald.

PS: 

> Clients are 64-bit ScientificLinux 5.5 
Well, well, you did not tell us what the server runs nor if only the
SCL5.5 clients have problems.