Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm running an Open Directory server (Mac OS 10.6.7 Server) and a bunch of Mac clients (Mac OS 10.6.7). On the clients, logging in to a local account is fast (less than 10 seconds between pressing Return at the Login Window and Finder being ready to use).

However, when logging into a network account (one authenticated by the Open Directory server, and whose home folder is an AFP share), logins take considerably more time --- between 1.5 and 3 minutes. For the first 20-30 seconds after pressing Return at the Login Window, the progress meter spins without any other feedback. Then it shows the username and icon for at least another minute, then, finally, Finder.

How can I troubleshoot this to figure out why it's taking so long? Is there a log of what's happening during this time --- or, better yet, a way to generate a waterfall diagram (like BootVis in Windows XP, or Firebug)?

share|improve this question
    
Looks like a question for Server Fault –  PleaseStand May 15 '11 at 3:15
    
@PleaseStand: Maybe? I don't know. It seems to me questions like this occupy a grey area partway between Server Fault and Super User. I created a Stack Exchange proposal for "Computer Lab Administration", but it didn't gain much traction. –  smokris May 17 '11 at 15:58

1 Answer 1

up vote 1 down vote accepted

I noticed this in my clients' system logs:

5/14/11 11:00:51 PM SecurityAgent[2735] User info context values set for testuser
5/14/11 11:01:12 PM authorizationhost[2734] k5_authenticate(): got -1765328228 (Cannot contact any KDC for requested realm) on /SourceCache/SecurityAgent/SecurityAgent-39574/plugins/krb5/krb5_operations.c:84
5/14/11 11:01:12 PM authorizationhost[2734] -[SFBuiltinAuthenticate performDSPasswordAuth](): got -1765328228 (Cannot contact any KDC for requested realm) on /SourceCache/SecurityAgent/SecurityAgent-39574/authhostbuiltins.m:1039
5/14/11 11:01:13 PM SecurityAgent[2735] Login Window Showing Progress

KDC is running on the server, but the firewall ports were blocked. I unblocked the KDC ports (TCP/UDP 88) by going into Server Admin > Firewall > Settings > Services > Allow: Kerberos V5 KDC, and now network login takes only 5-10 seconds, same as local accounts.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.