Hello Tomas,
Really appreciate for your quick response on this. I am seeing this behavior on default login service which come with RHEL 6.x installation. I have not modified the same.
Below is the configuration for same.
Thanks & Regards,
MINAL PATIL
Pune | Mobile : +91 7350014029 | Mail : minalkpatil9@xxxxxxxxx
From: Tomas Mraz <tmraz@xxxxxxxxxx>
To: Minal Patil <minalk.patil@xxxxxxxxx>; Pluggable Authentication Modules <pam-list@xxxxxxxxxx>
Sent: Friday, 19 December 2014 5:01 PM
Subject: Re: delay observed in pam_authenticate when called multiple times.
On Pá, 2014-12-19 at 09:06 +0000, Minal Patil wrote:
> Hello Sir/Madam,
> I am working on a PAM authentication module where i am seeing delay in pam_authenticate when called in sucessive manner.Below is my PAM function call sequence.
> pam_start()
> ...
> 1. pam_authenticate()
> 2. pam_authenticate()
> 3. pam_authenticate()
>
> 4. pam_authenticate()
>
> ....
>
> 1000.pam_authenticate()
> ....
> pam_end()
>
> It is observed that the first pam_authenticate responds with 40 ms. The response time goes up with every subsequent pam_authenticate call. for 1000 the call the response time is observed to be 2 seconds.
>
> Below are my system details:
>
> [myuser@myhost workdir]$ ls -l /lib/libpam*
> lrwxrwxrwx. 1 root root 17 Oct 18 2013 /lib/libpamc.so.0 -> libpamc.so.0.82.1
> -rwxr-xr-x. 1 root root 13764 Oct 15 2012 /lib/libpamc.so.0.82.1
> lrwxrwxrwx. 1 root root 21 Oct 18 2013 /lib/libpam_misc.so.0 -> libpam_misc.so.0.82.0
> -rwxr-xr-x. 1 root root 11460 Oct 15 2012 /lib/libpam_misc.so.0.82.0
> lrwxrwxrwx. 1 root root 16 Oct 18 2013 /lib/libpam.so.0 -> libpam.so.0.82.2
> -rwxr-xr-x. 1 root root 52540 Oct 15 2012 /lib/libpam.so.0.82.2
> [myuser@myhost workdir]$ uname -a
> Linux myhost 2.6.32-358.18.1.el6.i686 #1 SMP Fri Aug 2 17:10:27 EDT 2013 i686 i686 i386 GNU/Linux
> [myuser@myhost workdir]$ cat /etc/redhat-release
> Red Hat Enterprise Linux Server release 6.4 (Santiago)
>
> I have observed the same behavior on RHEL 6.2 as well.
> https://www.redhat.com/mailman/listinfo/pam-list
Which PAM modules do you have configured in the PAM stack? Do you
observe the same behavior even with PAM stack containing a single:
auth required pam_permit.so
If not, you have to find out which PAM module causes the delay although
I suppose this can be multiple modules as PAM stack was not designed to
operate this way. You should always call pam_start() pam_authenticate()
and pam_end().
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
(You'll never know whether the road is wrong though.)
_______________________________________________ Pam-list mailing list Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list
