Date: Thu, 25 Jul 2002 07:58:31 -0500 From: "Travis L. Leuthauser" <travis@bbipmail.com> To: <freebsd-security@freebsd.org> Subject: RE: Openssh-portable Message-ID: <NEBBIGMCEDGDNFGOAAFLKEFLKGAA.travis@bbipmail.com> In-Reply-To: <20020725145327.A404@melusine.cuivre.fr.eu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
As I understand, this is a known problem with openssh-portable when using
privsep. Apparently after initiating privsep, sshd attempts to read
/etc/resolv.conf, which it can't since chrooted to /var/empty. A workaround
is to copy resolv.conf into /var/empty/etc. The only problem w/ this is
that /var/empty is intented to be empty.
-Travis
-----Original Message-----
From: owner-freebsd-security@FreeBSD.ORG
[mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Thomas Quinot
Sent: Thursday, July 25, 2002 7:53 AM
To: Scott Gerhardt
Cc: freebsd-security@freebsd.org
Subject: Re: Openssh-portable
Le 2002-07-25, Scott Gerhardt écrivait :
> I just set up openssh-portable-3.4p1_5 from the ports on a 4.5-RELEASE box
> and now ssh is very slow to login (60 seconds or more). Other than the
> delay, everything else works fine. I couldn't find any answers in the
> archives.
OpenSSH runs various commands to gather entropy for random number
generation; some of these might hang, eg due to NFS servers being
slow or unavailable. Check whether the ssh_prng_commands config file
contains anything that could hang for a while.
Thomas.
--
Thomas.Quinot@Cuivre.FR.EU.ORG
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NEBBIGMCEDGDNFGOAAFLKEFLKGAA.travis>