LDAP-UX: First ldap login takes about 5 minutes, others are fine

[dev44]

Ok, so here are the logs from the debug and the ssh -vvv

[Don Mallory]

Hi dev44,

The only thing that is standing out is that your hptest6 account password is expired:

Dec 16 10:19:07 server sshd[22288]: pam_sm_acct_mgmt: exiting, error 17
Dec 16 10:19:07 server sshd[22288]: pam_acct_mgmt: error User account has expired
Dec 16 10:20:29 server sshd[22295]: warn_user_passwd_will_expire: -1 -1 14594 -1

Then it sits for 3 minutes on a permission denied error:

Dec 16 10:20:32 server sshd[22295]: pam_setcred: error Permission denied

before moving on to try to fail again.

Get your account admins to leave the account without a password that needs to be changed on first login, or log in on a windows box, change the password and log in again.

You could also try getting them to set the acount with the password to never expire, and not change the password on next logon.

Don't put host or time limits on the account either.

Don

[dev44]

Thanks Don....I will test that out and let you know.

[dev44]

We had a 550MB wtmp file....

[Don Mallory]

Wow, that's cool. I had no idea there was a limit. Just out of curiosity, was /var full, and it wasn't able to write any more activity?

Don

[Dennis Handly]

>Don: I had no idea there was a limit.

I don't think there is a limit, just that it takes a long time to go to the end? Read all the entries? Start pwgrd(1M)?