Natty PAM update causes slow logins

[Bradley Hook]

With Natty beta system up-to-date as of Feb 17th, 2011, which included a few specific PAM updates, the login time suddenly became very slow (> 30 seconds even at CLI). Commenting out the krb5 line in the PAM common-auth file makes the issue unnoticeable. Nothing suspicious in the logs that I could see without changing debug levels.

[Steve Langasek (vorlon)]

Well, if commenting out krb5 speeds it up, this sounds like a pam_krb5 issue rather than a pam issue, doesn't it? pam doesn't pull in krb5 automatically, you must have configured this. :)

krb5 slowness is usually an indication of network problems. It might even be a sign of a bug in ipv6 name resolution on your network; and as eglibc was also uploaded this week, it might be a regression there. But I don't believe there are any changes to pam in the new version that would have caused krb5 slowdowns. I'm running the new package with krb5 just fine on my own systems and don't see this symptom.

the upgrade of pam at the same time is almost certainly a coincidence.

[Russ Allbery (rra-debian)]

I think we need more information, such as a debug trace of what libpam-krb5 is doing when the slowness is observed, to figure out what could be causing this. Another useful data point would be whether kinit is slow when libpam-krb5 is slow.

[Launchpad Janitor (janitor)]

[Expired for libpam-krb5 (Ubuntu) because there has been no activity for 60 days.]