Hi All, Use Dns Yes is already commented in this file. But still am seeing this message. Can you help me.
On Tue, Aug 27, 2013 at 11:52 PM, Eric Shubert <[email protected]> wrote: > On 08/27/2013 08:26 AM, Dan McAllister wrote: > >> On 8/27/2013 10:35 AM, Eric Shubert wrote: >> >>> I just did this, but I'm sorry to say that it didn't solve my problem >>> entirely. After a few tests, it appears that every other login is >>> quick, and every other login has a delay (20 seconds or so). Seems >>> persistent in that regard (I did a dozen or so tests). >>> >>> Perhaps a nss config issue? >>> >>> Thanks. >>> (P.S. I'm aging here!) ;) >>> >>> >> >> Eric -- I thought you were running COS5??? >> > > This one in particular is COS5. I'm (slowly) getting things migrated to > COS6 because it runs a *lot* better as a KVM (on Proxmox). As soon as I get > a certain samba issue ironed out (anyone know about changing the host name > on a PDC?), I'll be tackling QMT on COS6. > > In COS6, there is another set of SSHd configs whose default was changed: >> *GSSAPI* >> >> >> Like the reverse DNS lookup, you want to TURN OFF this feature: >> Change to: >> *GSSAPIAuthentication no* >> >> (The other GSSAPI settings don't matter much if you're not permitting >> AUTH) >> >> To my understanding, the GSSAPI functionality is an alternative way of >> securing your connection for a password-less connection (vs. auth keys) >> that uses a Kerberos-type auth scheme.... no thanks... :) >> > > Somehow I had GSSAPIAuthentication turned on. I've no idea when/how/why > that happened. I turned it off, and *voila*, no more delays! > > Thanks Dan! You're the bomb-diggity! > > > -- > -Eric 'shubes' > > > > ------------------------------**------------------------------**--------- > To unsubscribe, e-mail: > qmailtoaster-list-unsubscribe@**qmailtoaster.com<[email protected]> > For additional commands, e-mail: > qmailtoaster-list-help@**qmailtoaster.com<[email protected]> > > -- *Thanks & Best Regards, Manikandan.C *
