Have you tried the -K option for su to prevent a Kerberos authenticate request just to see if it is indeed Kerberos related? 

--et



On Mon, 9 Dec 2002 17:37:17 -0600 (CST)
"David Burgess" <burgess@neonramp.com> wrote:

> Thanks - I'll get the rest of the systems set up for Kerberos and see if
> that helps.
> 
> Dave
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > "David Burgess" <burgess@neonramp.com> writes:
> >
> >> On a couple of the machines, for no reason that I can fathom, the 'su'
> >> command takes up to 90 seconds to respond with a 'password:' response.
> >>  Specifically, it happens most often on the primary mail server in the
> >> mail cluster, but on other machines as well.  The problem comes and
> >> goes, but is definitely worse since I started the 1.6 upgrade.
> >
> > I suspect it's doing some sort of magic behind-the-scenes kerberos 5
> > server discovery.
> >
> > - --Michael
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.1 (NetBSD)
> > Comment: See http://www.flame.org/~explorer/pgp for my keys
> >
> > iD8DBQE99Sh/l6Nz7kJWYWYRAv+4AJ9Mc0ocRz8pph6JF6QSuR5lHRmfrwCfeSkK
> > V4lhCKCl/GjbPd92OxC4vhI=
> > =AFJi
> > -----END PGP SIGNATURE-----
> 
> 
> -- 
> Dave Burgess
> CTO, Nebraska On-Ramp
> Chief Engineer, Mitec Internet Services
> Bellevue, NE 68123
> 
> 
>