Hello, Corinna, 1. It only takes 3 secs on your machine, but do you logon with an Active Directory user? The problem only occurs if the authentication runs against a domain controller! If I change the user in my passwd to a local user of the server, the logon process works with the regular speed (2 secs) and no access to pipes can be seen!
2. The problem occours on cygwin environments after the 2008-06-18 version! I recognized the behaviour on all of our machines I tested on. Until cygwin 2008-06-18 it works fine, on versions after it, the problem occurs. 3. Unfortunately I can't debug the problem, because I am not a software developer. I can analyze the behaviour of software very exactly, but debugging is not my area. I am not experienced enought and it is too time consuming. I am a system administrator. 4. Actually I have watched the pipe access on a system running cygwin of 2008-09-12. There are exact the pipe accesses I reported before (\\<domaincontroller>\PIPE\samr, \\<domaincontroller>\PIPE\lsarpc). Many of the accesses has done until the logon process finished. If I see all the reported effects, I have to conclude that something basic change after the cygwin version of 2008-06-18! I do not believe that the reason for the problems are based on our Windows enviroment, because all regular Windows logons and the cygwin logons recent to version of 2008-06-18 (inclusive) work fine! If you try to reproduce the problem, test with domain users, not with local ones! Thanks in advance for further help and best regards Carsten Porzler > > Hello, Corinna, > > > > "large" logon time means 45 - 66 secs during public key authentication > > from viewing the banner text until an simple command has been excuted > > (e.g. "uname -a"). Password authentication works faster (about 20 sec), > > but much slower than with cygwin v.1.7.0 2008-06-18 (about 2 sec for > > password and public key authentication). > > Works fine for me. A logon takes about 3 secs on my machine... > > > We actually use cyglsa.dll because we need real user switching with public > > key authentication. > > ...using cyglsa, or, FWIW, any other logon method (create_token, > password in LSA registry). In theory, the cyglsa DLL doesn't call any > time consuming function. The main part of the job is already done in > the Cygwin DLL's seteuid() call by the calling server process, sshd in > this case. I examined the cyglsa.c code once more and there's nothing > in it which would explain the lag you're observing. The difference in > size is due to a lot of additional debug code which is kept available, > but is inactive. > > Did you try to debug this problem yourself in some way? The source code > of all componentes is freely available, as you might know. I'm > wondering if something in later Cygwin 1.7 DLLs collides with some stuff > on your machine (firewall, virus checked, whatever) or with some > settings in your environment. I assume the actual delay occurs in the > Cygwin DLL, not in the cyglsa.dll. It shouldn't be too hard to find out > where it dawdles if you're willing to invest some time in debugging. > > > Because of the "large logon time" problems we use the version of > > 2008-06-18 and not the newer ones. > > > > I noticed also, that the accesses to the pipes did not appear in the > > cygwin versions before 2008-06-18. Anything seems to be changed after this > > date. > > Did you test the next version after that, 2008-07-26? Does it already > show the pipe access you seem to observe in recent versions? The latest > Cygwin DLLs add the password in registry stuff which also does some LSA > calls, which might explain some of the LSA pipes. > > > Corinna > > -- > Corinna Vinschen Please, send mails regarding Cygwin to > Cygwin Project Co-Leader cygwin AT cygwin DOT com > Red Hat > > -- > Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple > Problem reports: http://cygwin.com/problems.html > Documentation: http://cygwin.com/docs.html > FAQ: http://cygwin.com/faq/ > -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
