On 29 January 2010 03:14, Ehud Karni <ehud at unix.mvs.co.il> wrote: > Disabling Kerberos and GSSAPI should not change anything (may be a > slight shorter protocol exchange) because they are just MORE options. My personal experience indicates otherwise - GSSAPI timeout can slow down logins a lot (by around 30-60 seconds, if I remember correctly). --Amos