ahhh i took a day to write the mail and i found the solution 5 minutes just after write the mail i add ldap_group_search_base = ou=Groups,dc=int-evry,dc=fr and it s far faster sorry to have disturbed Le 10/06/2010 11:39, Eric Doutreleau a écrit : > i m trying to make sssd working with ldap server on my fedora 13 machine. > it works but the login is very very slow ( several minutes ) > during this interval the process sssd_be is at 100% cpu time > > here is my sssd.conf > > [sssd] > config_file_version = 2 > > reconnection_retries = 3 > > services = nss, pam > > domains = default > [nss] > filter_groups = root > filter_users = root > reconnection_retries = 3 > > [pam] > reconnection_retries = 3 > > ldap_id_use_start_tls = False > ldap_tls_reqcert = never > cache_credentials = True > ldap_search_base = dc=int-evry,dc=fr > ldap_user_search_base = ou=People,dc=int-evry,dc=fr > chpass_provider = none > id_provider = ldap > auth_provider = ldap > debug_level = 5 > min_id = 1 > ldap_uri = ldap://ldap1.int-evry.fr/ > ldap_schema = rfc2307 > access_provider = ldap > ldap_access_filter = IntEPersInetServ=*unix-int* > ldap_default_bind_dn = cn=mcibind,ou=system,dc=int-evry,dc=fr > ldap_default_authtok_type = password > ldap_default_authtok = ********** > enumerate=false > > the direct ldap request is immediate > > does someone know how to speed up the process? -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
