When using LDAP for authentication, the system administrator should verify that timeout on LDAP queries are correctly defined.

In a recent case, each client ran into a timeout error while starting a new NX-Session.

The solution was to make the following changes on the server side to the some of the files:

In the /etc/libnss-ldap.conf configuration file, edit the following lines from:

# Search timelimit
#timelimit 30

to:

# Search timelimit
timelimit 3

To improve general performance of the LDAP queries:

In the file /etc/group add the line

+:::

In the file /etc/passwd add the line

+::::::

Edit the /etc/nsswitch.conf and change the line from:

passwd: files
ldapshadow: files
ldapgroup: files ldap

to:

passwd: compat
passwd_compat: ldap
group: compat
group_compat: ldap