From owner-freebsd-security Thu Jul 25 5:58:35 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3A19337B400 for ; Thu, 25 Jul 2002 05:58:33 -0700 (PDT) Received: from qmail.broadbandip.net (s01.wave-speed.net [204.1.106.4]) by mx1.FreeBSD.org (Postfix) with SMTP id 8E27843E8A for ; Thu, 25 Jul 2002 05:58:32 -0700 (PDT) (envelope-from travis@bbipmail.com) Received: (qmail 51725 invoked from network); 25 Jul 2002 12:58:32 -0000 Received: from nat-gw.gecinc.com (HELO travisl) (204.27.124.229) by s01.wave-speed.net with SMTP; 25 Jul 2002 12:58:32 -0000 From: "Travis L. Leuthauser" To: Subject: RE: Openssh-portable Date: Thu, 25 Jul 2002 07:58:31 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: <20020725145327.A404@melusine.cuivre.fr.eu.org> Importance: Normal Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org As I understand, this is a known problem with openssh-portable when using privsep. Apparently after initiating privsep, sshd attempts to read /etc/resolv.conf, which it can't since chrooted to /var/empty. A workaround is to copy resolv.conf into /var/empty/etc. The only problem w/ this is that /var/empty is intented to be empty. -Travis -----Original Message----- From: owner-freebsd-security@FreeBSD.ORG [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Thomas Quinot Sent: Thursday, July 25, 2002 7:53 AM To: Scott Gerhardt Cc: freebsd-security@freebsd.org Subject: Re: Openssh-portable Le 2002-07-25, Scott Gerhardt écrivait : > I just set up openssh-portable-3.4p1_5 from the ports on a 4.5-RELEASE box > and now ssh is very slow to login (60 seconds or more). Other than the > delay, everything else works fine. I couldn't find any answers in the > archives. OpenSSH runs various commands to gather entropy for random number generation; some of these might hang, eg due to NFS servers being slow or unavailable. Check whether the ssh_prng_commands config file contains anything that could hang for a while. Thomas. -- Thomas.Quinot@Cuivre.FR.EU.ORG To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message