The commented lines indicate the default values.

You need an uncommented line:
UseDNS no

You also need:
GSSAPIAuthentication no

Once you've made those changes, you need to restart sshd:
# service sshd restart

--
-Eric 'shubes'

On 08/28/2013 07:18 PM, ChandranManikandan wrote:
Hi All,
Use Dns Yes is already commented in this file. But still am seeing this
message.
Can you help me.


On Tue, Aug 27, 2013 at 11:52 PM, Eric Shubert <[email protected]
<mailto:[email protected]>> wrote:

    On 08/27/2013 08:26 AM, Dan McAllister wrote:

        On 8/27/2013 10:35 AM, Eric Shubert wrote:

            I just did this, but I'm sorry to say that it didn't solve
            my problem
            entirely. After a few tests, it appears that every other
            login is
            quick, and every other login has a delay (20 seconds or so).
            Seems
            persistent in that regard (I did a dozen or so tests).

            Perhaps a nss config issue?

            Thanks.
            (P.S. I'm aging here!) ;)



        Eric -- I thought you were running COS5???


    This one in particular is COS5. I'm (slowly) getting things migrated
    to COS6 because it runs a *lot* better as a KVM (on Proxmox). As
    soon as I get a certain samba issue ironed out (anyone know about
    changing the host name on a PDC?), I'll be tackling QMT on COS6.

        In COS6, there is another set of SSHd configs whose default was
        changed:
        *GSSAPI*


        Like the reverse DNS lookup, you want to TURN OFF this feature:
        Change to:
        *GSSAPIAuthentication no*

           (The other GSSAPI settings don't matter much if you're not
        permitting
        AUTH)

        To my understanding, the GSSAPI functionality is an alternative
        way of
        securing your connection for a password-less connection (vs.
        auth keys)
        that uses a Kerberos-type auth scheme.... no thanks... :)


    Somehow I had GSSAPIAuthentication turned on. I've no idea
    when/how/why that happened. I turned it off, and *voila*, no more
    delays!

    Thanks Dan! You're the bomb-diggity!


    --
    -Eric 'shubes'



    ------------------------------__------------------------------__---------
    To unsubscribe, e-mail:
    qmailtoaster-list-unsubscribe@__qmailtoaster.com
    <mailto:[email protected]>
    For additional commands, e-mail:
    qmailtoaster-list-help@__qmailtoaster.com
    <mailto:[email protected]>




--
*/Thanks & Best Regards,
Manikandan.C
/*



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to