> Just be careful with LDAP login authentication; I've seen a server where > if the LDAP subsystem falls over, you can't log in as root on the console.
Why not run tcpdump and find out what is happening. I know that pam_access looks up netgroups and it can cause a timeout while trying to login. In your /etc/krb5.conf, in the pam configuration section set the variable minimum_uid to something high enough so all the system accounts you use won't cause these lookups. David _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org http://cfengine.org/mailman/listinfo/help-cfengine