From owner-freebsd-questions@FreeBSD.ORG Mon Jan 9 05:10:15 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B4DE16A41F for ; Mon, 9 Jan 2006 05:10:15 +0000 (GMT) (envelope-from phrac@disflux.com) Received: from mail.disflux.com (tconl90110.tconl.com [204.26.90.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2529B43D45 for ; Mon, 9 Jan 2006 05:10:15 +0000 (GMT) (envelope-from phrac@disflux.com) Received: from [192.168.1.100] (unknown [192.168.1.100]) by mail.disflux.com (Postfix) with ESMTP id CDB611701B; Sun, 8 Jan 2006 23:10:23 -0600 (CST) In-Reply-To: <4053413D-A3D3-4553-A1C9-49E92CD1D1F9@u.washington.edu> References: <4053413D-A3D3-4553-A1C9-49E92CD1D1F9@u.washington.edu> Mime-Version: 1.0 (Apple Message framework v746.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <8C520B67-731D-4064-967F-BDD017FE3C28@disflux.com> Content-Transfer-Encoding: 7bit From: Derek Musselmann Date: Sun, 8 Jan 2006 23:10:13 -0600 To: Garrett Cooper X-Mailer: Apple Mail (2.746.2) Cc: FreeBSD Questions Subject: Re: Extremely slow authentication via SSH on FreeBSD 6.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jan 2006 05:10:15 -0000 On Jan 8, 2006, at 7:21 PM, Garrett Cooper wrote: > I'm having a hard time authenticating after upgrading the kernel > and some packages, and I was wondering if someone could help me out > with this issue. I marked the trouble points and included my > sshd_config. I noticed in your sshd_config that you have: # Change to yes to enable built-in password authentication. PasswordAuthentication yes PermitEmptyPasswords no # Change to no to disable PAM authentication ChallengeResponseAuthentication no By default, ssh uses PAM for authentication. By commenting those lines out, it doesn't mean that password checking won't be done, just that it will be handled with PAM. And then later in the file you have: UsePAM yes Try commenting out the PasswordAuthentication, PermitEmptyPasswords, and ChallengeResponse lines. ----- Derek Musselmann http://www.disflux.com