On 08/27/2013 08:26 AM, Dan McAllister wrote:
On 8/27/2013 10:35 AM, Eric Shubert wrote:
I just did this, but I'm sorry to say that it didn't solve my problem
entirely. After a few tests, it appears that every other login is
quick, and every other login has a delay (20 seconds or so). Seems
persistent in that regard (I did a dozen or so tests).

Perhaps a nss config issue?

Thanks.
(P.S. I'm aging here!) ;)



Eric -- I thought you were running COS5???

This one in particular is COS5. I'm (slowly) getting things migrated to COS6 because it runs a *lot* better as a KVM (on Proxmox). As soon as I get a certain samba issue ironed out (anyone know about changing the host name on a PDC?), I'll be tackling QMT on COS6.

In COS6, there is another set of SSHd configs whose default was changed:
*GSSAPI*

Like the reverse DNS lookup, you want to TURN OFF this feature:
Change to:
*GSSAPIAuthentication no*
  (The other GSSAPI settings don't matter much if you're not permitting
AUTH)

To my understanding, the GSSAPI functionality is an alternative way of
securing your connection for a password-less connection (vs. auth keys)
that uses a Kerberos-type auth scheme.... no thanks... :)

Somehow I had GSSAPIAuthentication turned on. I've no idea when/how/why that happened. I turned it off, and *voila*, no more delays!

Thanks Dan! You're the bomb-diggity!


--
-Eric 'shubes'


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to