Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Jul 2002 08:50:34 -0600
From:      Scott Gerhardt <scott@gerhardt-it.com>
To:        Dirk Janssen <djanssen@netcologne.de>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: Openssh-portable
Message-ID:  <B9656C5A.14C8%scott@gerhardt-it.com>
In-Reply-To: <200207250819.g6P8JZ204289@mailrelay.netcologne.de>

next in thread | previous in thread | raw e-mail | index | archive | help
>> 
>> I just set up openssh-portable-3.4p1_5 from the ports on a 4.5-RELEASE
>> box and now ssh is very slow to login (60 seconds or more).  Other than
>> the delay, everything else works fine.  I couldn't find any answers in
>> the archives.
>> 
>> Seems like DNS lookup issue.
>> 
>> Is this a known problem and what is the suggested fix?
> 
> I had this problem too on one machine (others worked fine, all
> 4.6-Stable), it had nothing to do with my settings in sshd_config
> (ReverseMappingCheck no).
> It helped (I don't exactly know why) to copy my resolv.conf to the
> directory /usr/local/empty/etc/ an chmod /usr/local/empty to 755.
> If /usr/local/empty doesn't exist, try /var/empty, this depends on how
> you compiled openssh.
> If somebody knows why exactly this solution works it would be kind to let
> me know.


FYI:
I did a standard "make install" of openssh-portable from ports.
In order fix the DNS delays when priviledge separation is ON you must copy
/etc/resolv.conf to /var/empty/etc/resolv.conf and /var/empty must be set to
755.

Everything works fine now.  Thanks for all your help everone!

--
Scott


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B9656C5A.14C8%scott>