Philipp: Thanks for notifying about the other ldap possibility. While I am not sure that I agree on libnss-ldap is the cource of the problem (see timing on OpenSUSE above) replacing it with nslcd and libnss-ldapd certainly improves login time to an acceptable level:
me@myserver:~$ time id tfp696
/...id output removed.../
real 0m7.034s
user 0m0.050s
sys 0m0.020s
This still still 3 times more than OpenSUSE/nss_ldap, but fully useable so you can consider this issue as resolved.
Philipp: Thanks for notifying about the other ldap possibility. While I am not sure that I agree on libnss-ldap is the cource of the problem (see timing on OpenSUSE above) replacing it with nslcd and libnss-ldapd certainly improves login time to an acceptable level:
me@myserver:~$ time id tfp696
/...id output removed.../
real 0m7.034s
user 0m0.050s
sys 0m0.020s
This still still 3 times more than OpenSUSE/nss_ldap, but fully useable so you can consider this issue as resolved.