Q: Slow Login to SMB/AFP File Share
Configuration:
OSX 10.11.3 (15D21)
Server V5.0.4
Services Running: Calendar, File Sharing, Profile Manager, Time Machine, VPN, Websites, Wiki, DNS, FTP, Open Directory
We have an issue that has been going on for several months where clients attempting to login to file sharing (AFP or SMB makes no difference) take excessively long to authenticate. It consistently takes about ~40-45 seconds to login or to even reject an incorrect password. The really strange part is that this affects every computer on our network except for one Mac Mini. It does not appear to be client specific, i.e. all users login with no delay on the one Mac Mini and slowly on every other computer. I haven't been able to determine any difference in network or connection settings on the different computers but I'm sure there are settings I'm not aware of.
Has anyone come across anything like this?
Thanks in advance.
Mac mini, OS X El Capitan (10.11.3)
Posted on Mar 3, 2016 5:32 PM
Found the problem.
I checked the system.log on one of the slow client computers while logging in and saw this error message:
"acquire_kerberos failed user@OldServer.INT: -1765328228 - unable to reach any KDC in realm OldServer.INT, tried 7 KDCs"
It seems that all of the slow client computers were attempting to log in to an old, now defunct, server until it timed out and connected to the right server.
After doing some searching I discovered that all of the slower computers still had an old config file for an older version of Kerberos that pointed to the old server.
The offending file:
/Library/Preferences/edu.mit.Kerberos
I renamed this file and now file share logins are back to normal near practically instant speeds.
Posted on Mar 9, 2016 1:52 PM