Re: ID Command Hanging During Group Retrieval via nslcd

[Kokila Koks <kokilavaradhan [at] gmail.com>]

Just to add to my earlier message 

The actual issue is that LDAP user login attempts are failing, and the journal logs indicate that group retrieval is failing. To investigate further, I used the id command to observe what happens during the lookup.

Since user login cannot afford to wait for a long time, could you suggest ways to optimize or reduce the time taken to fetch group details for a user, especially in environments with a large LDAP database?

Thanks,

kokila V 

On Wed, Jun 18, 2025 at 6:27 PM Kokila Koks <kokilavaradhan [at] gmail.com> wrote:

Hello Community,

I am encountering an issue where running the id command for a user causes the process to hang during group retrieval. The system uses nslcd configured through nsswitch.conf for group lookups.  

From the system logs, I observe that the following call fails :

auto status = getpwnam_r(userName.c_str(), &pwd, buffer.data(), buflen, &pwdPtr);

When this happens, the id username command hangs indefinitely.

I have attached the relevant nslcd logs for reference. Could you please help diagnose why the id command is getting stuck and suggest possible solutions?

Thanks,

kokila V