the IPA Infrastructure at my company is quite big and the performance of the login varies
from acceptable to unacceptable. We are aware of the performance tuning guide by jhrozek,
but it did not improve the performance in our case.
In order to analyze our setup, we pinned one random IPA client onto one IPA Server in
sssd.conf and started with debug_level=6 in all config sections.
After deleting the cache on both machines and restarting the sssd service, the login with
our AD-User on the IPA server works right away. Whereas, the client takes up to ~10
minutes before the login with our AD Account works at all. How long does it take the IPA
Server on average to start up and serve client requests ?
After a successful login on the client, the performance is acceptable (~2s) for some time.
On the next day the performace of the first login becomes quite slow again (up to 30s and
As IPA beginner I am to some extent overwhelmed by the sheer mass of logs and I'd be
glad if you point me towards the right direction.
Show replies by date