ldapsearch returns quickly. The initial bind succeeds quickly. It looks at though sssd is trying to populate all the users POSIX attributes into it's db. When we create a test user with no host attributes, the bind and authentication completes in ms, versus a user with many host attributes takes 30+ seconds.

From: "Jakub Hrozek" <jhrozek@redhat.com>
To: sssd-users@lists.fedorahosted.org
Sent: Tuesday, December 9, 2014 10:24:39 AM
Subject: Re: [SSSD-users] SSSD with Oracle DSEE

On Tue, Dec 09, 2014 at 05:57:18PM +0000, PATRICK wrote:
> We will drop the other stanzas and retest shortly.
> We are not using nested groups and we already discussed switching to rfc2307 from rfc2307bis.
> The txnlogs on the DSEE instance see a authenticated bind, nothing out of the normal. The server has no readwaiters, minimal connections.
> thanks!
> Pat

Ah, I'm sorry, you originally said you were seeing long connection
times, not large load on the servers...

Do you also see a long connection time of you search the server with
sssd-users mailing list