very slow initialization after reboot

[Manhong Dai <daimh [at] umich.edu>]

Dear NSLCD Support,

    After reboot, the first 'id <USER>' took about two minutes and then 
failed. Then all following 'id' command work fine. During the two 
minutes of waiting period, I tcpdump-ed the packets on both the LDAP 
client and LDAP server,  but didn't detect any packets until the first 
'id' command failed.

    A detailed log is attached.

###nslcd.conf

uid nslcd
gid nslcd
uri ldap://krb5.mbni.org
base dc=mbni,dc=org
map    passwd homeDirectory    "/home$homeDirectory"
map    passwd loginShell    "/bin/bash"
filter    passwd (!(gidNumber=1107))


##/etc/pam.d/system-auth

account    required    pam_unix.so
account    required    pam_time.so
account    sufficient    pam_localuser.so
account    sufficient    pam_succeed_if.so uid < 1000 quiet
account    required    pam_ldap.so #to enable pam_authz_search in nslcd.conf
account    sufficient    pam_krb5.so
account    required    pam_permit.so


    What should I do to fix this delay?


Best,

Manhong

Attachment: nslcd.log
Description: Text Data