dovecot - Nov 2013 - Dovecot login slow

Can't figure out why the login is slow. I telnet to port 143 on 
localhost. I type:

0 login user password

Takes about 10 seconds and it lets me in. I'm using MYSQL and it's a 
small indexed database on a fast server so it's not the mysql query 
that's slowing it down. At least I don't think it is. But - kind of 
stumped. Just wondering if there's something obvious I'm overlooking.

On 11/13/2013 12:41 PM, Marc Perkel wrote:
> Can't figure out why the login is slow. I telnet to port 143 on 
> localhost. I type:
>
> 0 login user password
>
> Takes about 10 seconds and it lets me in. I'm using MYSQL and it's
a
> small indexed database on a fast server so it's not the mysql query 
> that's slowing it down. At least I don't think it is. But - kind of
> stumped. Just wondering if there's something obvious I'm
overlooking.
>
Here's my dovecot -n listing. Not using PAM

# 2.2.7: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-042stab083.2 x86_64 CentOS release 6.4 (Final) ext4
auth_master_user_separator = *
auth_mechanisms = login plain
disable_plaintext_auth = no
first_valid_uid = 12
info_log_path = /var/log/dovecot.log
log_path = /var/log/dovecot.log
login_greeting = Computer Tyme Dovecot ready.
mail_fsync = never
mail_gid = mail
mail_location = maildir:/vhome/%d/home/%n:INDEX=/email/imap-cache/%d-%n
mail_uid = mail
passdb {
   args = /etc/dovecot/sql.conf
   driver = sql
}
passdb {
   args = /etc/dovecot/master-combined-sql.conf
   driver = sql
   master = yes
   pass = yes
}
protocols = imap pop3
service anvil {
   client_limit = 20000
}
service auth {
   client_limit = 20000
   unix_listener auth-client {
     mode = 0666
   }
   unix_listener auth-master {
     mode = 0666
   }
}
service imap-login {
   process_limit = 4000
   process_min_avail = 30
   service_count = 0
}
service imap {
   process_limit = 4000
}
service pop3-login {
   process_limit = 2000
   process_min_avail = 20
   service_count = 0
}
service pop3 {
   process_limit = 2000
}
ssl_ca = </usr/share/ssl/certs/rapidssl.crt
ssl_cert = </usr/share/ssl/certs/imapd.pem
ssl_key = </usr/share/ssl/certs/imapd.pem
verbose_proctitle = yes
protocol imap {
   mail_max_userip_connections = 50
}
protocol pop3 {
   pop3_uidl_format = %v.%u
}

> ssl_ca = </usr/share/ssl/certs/rapidssl.crt
> ssl_cert = </usr/share/ssl/certs/imapd.pem
> ssl_key = </usr/share/ssl/certs/imapd.pem
>
> These lines look weird to me. Why do they have a < ?
Red herring; this is standard.  I think it means "feed this file into
stdin".

On 11/13/2013 12:41 PM, Marc Perkel wrote:
>>> Takes about 10 seconds and it lets me in. I'm using MYSQL and
it's a
>>> small indexed database on a fast server so it's not the mysql
query that's
>>> slowing it down. At least I don't think it is. But - kind of
stumped. Just
>>> wondering if there's something obvious I'm overlooking.
I think maybe turning up the verbosity on logging will help.  If that
doesn't, try process tracing the dovecot auth process.

Joseph Tam <jtam.home at gmail.com>