> Just be careful with LDAP login authentication; I've seen a server where
> if the LDAP subsystem falls over, you can't log in as root on the console.

Why not run tcpdump and find out what is happening. I know that
pam_access looks up netgroups and it can cause a timeout while trying
to login. In your /etc/krb5.conf, in the pam configuration section set
the variable minimum_uid to something high enough so all the system
accounts you use won't cause these lookups.

David
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
http://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to