Dear Lazypora,

I joined a freshly installed Debian Stretch with Samba to my company's Active Directory. Works fine so far. But every morning my first login is soooo slow. Waiting for something like 30 up to 60 seconds before anything happens. I suspect that passwd and/or group resolution are no longer in caches after a night of silence.

Someone has got a hint for me?

krb5.conf:

[libdefaults]
default_realm = MY.COMPLETE.DOMAIN.NAME
dns_lookup_kdc = true
dns_lookup_realm = false

smb.conf:

[global]
security = ads
realm = MY.COMPLETE.DOMAIN.NAME
workgroup = AD
netbios name = MY-MACHINE-NAME
idmap config * : range = 10000-20000
idmap config * : backend = tdb
template homedir = /home/%D/%U
template shell = /bin/bash
encrypt passwords = yes
domain master = false
local master = false
preferred master = false
os level = 0
winbind refresh tickets = yes


nsswitch.conf:
```
passwd: compat winbind
group: compat winbind

plus some more, but not relevant here

#debian #samba