Hey Everyone,

Thanks for all of your help.  i found biggest part of the problem.  Before I used AAA-ldap-setup, I used engine-manage-domains.  This was was creating a conflict, essentially the managed-domain wass going first and after it timed-out it would use the aaa-ldap connection.  After I removed the managed-domain and restart the ovirt-engine, the logins started to work much much faster.  it's around 10 secs now.  Still would prefer to be less than a second, but way better than a minute.

 
 

On Thu, Nov 12, 2015 at 7:30 PM, Jeb Baxley <jeb.baxley@gmail.com> wrote:
I used AAA, specificaly the aaa-ldap-setup script.  it went very quickly and the login check and the search check went very quickly - less than a second.

the engine ( the ovirt installation that manages the ovirt nodes) can resolve itself.  I just did a nslookup and it pulls from the IPA DNS.  


On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <awels@redhat.com> wrote:
On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
> Are you using AAA or manage-domains?
>

Also are you 150% sure your engine can resolve itself (Maybe DNS issue or
/etc/hosts not configured right?)

> On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
> > Hey Everyone,
> >
> > I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long
> > login times.  I know it's not my IPA servers, as login times are
> > farily quick for the servers that are attached to the domain.
> >
> > I can even do a kinit very quickly on all of the ovirt nodes.  So any
> > ideas?  Where can I find logs about IPA logins for ovirt?
> >
> >
> >     >  >    > Jeb Baxleyabout.me/jeb.baxley
> >
> >  >  >       >       >
> >
> > _______________________________________________
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users