From owner-freebsd-security Fri Mar 30 7:41:53 2001 Delivered-To: freebsd-security@freebsd.org Received: from proxy.centtech.com (moat.centtech.com [206.196.95.10]) by hub.freebsd.org (Postfix) with ESMTP id 9DBFC37B719 for ; Fri, 30 Mar 2001 07:41:49 -0800 (PST) (envelope-from anderson@centtech.com) Received: (from smap@localhost) by proxy.centtech.com (8.8.4/8.6.9) id JAA15459; Fri, 30 Mar 2001 09:41:44 -0600 (CST) Received: from sprint.centtech.com(10.177.173.31) by proxy.centtech.com via smap (V2.0/2.1+anti-relay+anti-spam) id xma015455; Fri, 30 Mar 01 09:41:25 -0600 Received: from centtech.com (shiva [10.177.173.77]) by sprint.centtech.com (8.9.3+Sun/8.9.3) with ESMTP id JAA27377; Fri, 30 Mar 2001 09:41:23 -0600 (CST) Message-ID: <3AC4A923.87D7F20C@centtech.com> Date: Fri, 30 Mar 2001 09:41:23 -0600 From: Eric Anderson Reply-To: anderson@centtech.com Organization: Centaur Technology X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.14-5.0smp i686) X-Accept-Language: en MIME-Version: 1.0 To: Guy Poizat Cc: George.Giles@mcmail.vanderbilt.edu, security@freebsd.org Subject: Re: SSH login delay References: <5.0.2.1.0.20010328113829.01ac0d30@pop.partsonline.fr> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Actually, we had the same problem.. run the patches to openssh on the server side (and client side if you can) and it should fix it.. Guy Poizat wrote: > > At 16:03 27/03/2001, you wrote: > >Does any one know what causes the long delay between entering the password > >to ssh and the actual logging in of the shell prompt ? > > > >Sometimes it takes more than a minute when I know it is not network speed ? > > > >This behavior makes me suspicious. > > > >This is observed on the latest release of FreeBSD. > > Perhaps it has somethin' to deal with DNS lookup failure (timeout->delay) ? > Can all of your hosts get a reply for a DNS query about each others ? > > I got that kind of problem and solved it by ading a BIND serving for my > NATed hosts. > > -- > Guy Poizat > poizat@partsonline.fr > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- ------------------------------------------------------------------------------- Eric Anderson anderson@centtech.com Centaur Technology (512) 418-5792 To see a need and wait to be asked, is to already refuse. ------------------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message