Re: [CentOS] ssh slow

2010-05-06 Thread ann kok
but I put this to no

the ssh is still slow

any hints

thank you


--- On Wed, 5/5/10, John R Pierce pie...@hogranch.com wrote:

 From: John R Pierce pie...@hogranch.com
 Subject: Re: [CentOS] ssh slow
 To: CentOS mailing list centos@centos.org
 Received: Wednesday, May 5, 2010, 8:52 PM
 ann kok wrote:
  Hi
 
  How I can configure sshd_config to improve the ssh
 faster?
 
  It is slow to prompt the login
    
 
 badly configured reverse DNS on the client hosts is the
 most common 
 cause of this.  try ...
 
     UseDNS no
 
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-06 Thread Les Mikesell
ann kok wrote:
 but I put this to no
 
 the ssh is still slow
 

Did you restart the sshd service after the change?  I don't know if it reads 
the 
config file otherwise.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-06 Thread John Doe
From: ann kok oiyan...@yahoo.ca
 ssh is still slow

Tried to use verbose to see what's going on...?
ssh -vvv

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-06 Thread Khusro Jaleel
I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4 
machine, it does the same thing, i.e. it sort of hangs for a while then 
comes back after about 10-15 secs with a login prompt.

I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT 
sshd_config) file on the Ubuntu box and *commenting out* the following 
fixes it immediately, without needing to restart anything:

GSSAPIAuthentication yes
GSSAPIDelegateCredentials no

Change the above 2 lines to

#GSSAPIAuthentication yes
#GSSAPIDelegateCredentials no

and try again.

On 06/05/10 13:25, ann kok wrote:
 but I put this to no

 the ssh is still slow

 any hints

 thank you

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-06 Thread Tait Clarridge
On Thu, 2010-05-06 at 16:39 +0100, Khusro Jaleel wrote: 
 I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4 
 machine, it does the same thing, i.e. it sort of hangs for a while then 
 comes back after about 10-15 secs with a login prompt.
 
 I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT 
 sshd_config) file on the Ubuntu box and *commenting out* the following 
 fixes it immediately, without needing to restart anything:
 
 GSSAPIAuthentication yes
 GSSAPIDelegateCredentials no
 
 Change the above 2 lines to
 
 #GSSAPIAuthentication yes
 #GSSAPIDelegateCredentials no
 
 and try again.
 
 On 06/05/10 13:25, ann kok wrote:
  but I put this to no
 
  the ssh is still slow
 
  any hints
 
  thank you
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos


Try disabling both reverse DNS and GSSAPIAuthentication

http://www.taiter.com/blog/2009/04/disabling-reverse-lookup-for-s.html

Tait


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-06 Thread Gary Greene
On 5/6/10 10:20 AM, Tait Clarridge t...@clarridge.ca wrote:
 On Thu, 2010-05-06 at 16:39 +0100, Khusro Jaleel wrote:
 I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4
 machine, it does the same thing, i.e. it sort of hangs for a while then
 comes back after about 10-15 secs with a login prompt.
 
 I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT
 sshd_config) file on the Ubuntu box and *commenting out* the following
 fixes it immediately, without needing to restart anything:
 
 GSSAPIAuthentication yes
 GSSAPIDelegateCredentials no
 
 Change the above 2 lines to
 
 #GSSAPIAuthentication yes
 #GSSAPIDelegateCredentials no
 
 and try again.
 
 On 06/05/10 13:25, ann kok wrote:
 but I put this to no
 
 the ssh is still slow
 
 any hints
 
 thank you
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
 
 Try disabling both reverse DNS and GSSAPIAuthentication
 
 http://www.taiter.com/blog/2009/04/disabling-reverse-lookup-for-s.html
 
 Tait
 
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

Unless of course you ARE using GSSAPI for auth (environment using Kerberos
for auth), and then at that point, you need to look at the connection
between you, the server in question, and your KDC. If that is having
hiccups, you'll get slow authentication speeds.

-- 
Gary L. Greene, Jr.
IT Operations
Minerva Networks, Inc.
Cell:  (650) 704-6633
Phone: (408) 240-1239

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-05 Thread Barry Brimer
 How I can configure sshd_config to improve the ssh faster?

 It is slow to prompt the login

That usually indicates a DNS problem.  sshd tries to do a reverse DNS 
resolution to lookup the connecting client.

Barry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-05 Thread ann kok
I heard it before

but how can be solved?

Thank you

--- On Wed, 5/5/10, Barry Brimer li...@brimer.org wrote:

 From: Barry Brimer li...@brimer.org
 Subject: Re: [CentOS] ssh slow
 To: CentOS mailing list centos@centos.org
 Received: Wednesday, May 5, 2010, 8:47 PM
  How I can configure sshd_config
 to improve the ssh faster?
 
  It is slow to prompt the login
 
 That usually indicates a DNS problem.  sshd tries to
 do a reverse DNS 
 resolution to lookup the connecting client.
 
 Barry
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-05 Thread John R Pierce
ann kok wrote:
 Hi

 How I can configure sshd_config to improve the ssh faster?

 It is slow to prompt the login
   

badly configured reverse DNS on the client hosts is the most common 
cause of this.  try ...

UseDNS no


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ssh slow

2010-05-05 Thread Fernando Gleiser
- Original Message 

 From: ann kok oiyan...@yahoo.ca
 To: centos@centos.org
 Sent: Wed, May 5, 2010 9:44:12 PM
 Subject: [CentOS] ssh slow
 
 Hi

 How I can configure sshd_config to improve the ssh faster?

 It  is slow to prompt the login


Fix your DNS setup and/or configure it to UseDNS no.
Such slowdowns happen because sshd tries to get a reverse DNS lookup of your IP 
address.

It can be a big PITA when you try to login into a server to fix a broken DNS 
and the login times out because it tries to get a that PTR record back..


Just remember the mantra: most weird network problems are related to DNS 
problems.


Fer


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH slow

2010-01-19 Thread Timo Schoeler
On 01/19/2010 12:26 AM, Les Mikesell wrote:
 ML wrote:
 Hi All,
 
 All of my systems are running 5.4 x64. The are all AMD x64
 processors with at least 2gb of RAM in each.
 
 I am running SSH on a non standard port.
 
 When I SSH into ANY of my systems, I get prompted for my password
 right away, but after entering, it takes 30+ seconds to get logged
 in and get a prompt so I can work.
 
 I dont quite know what to look for here
 
 Does anyone have thoughts?
 
 That sounds like a failing reverse DNS lookup or IDENT query dropped
 by a firewall so you wait for the timeout.

Try setting 'UseDNS no' in /etc/ssh/sshd_config.

HTH,

Timo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH slow

2010-01-18 Thread Brett Serkez
In /etc/ssh/sshd_config change:

UseDNS yes

to

UseDNS no

Brett

On Mon, Jan 18, 2010 at 6:08 PM, ML mailingli...@mailnewsrss.com wrote:

 Hi All,

 All of my systems are running 5.4 x64. The are all AMD x64 processors with
 at least 2gb of RAM in each.

 I am running SSH on a non standard port.

 When I SSH into ANY of my systems, I get prompted for my password right
 away, but after entering, it takes 30+ seconds to get logged in and get a
 prompt so I can work.

 I dont quite know what to look for here

 Does anyone have thoughts?

 -Jason

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH slow

2010-01-18 Thread Les Mikesell
ML wrote:
 Hi All,
 
 All of my systems are running 5.4 x64. The are all AMD x64 processors with at 
 least 2gb of RAM in each.
 
 I am running SSH on a non standard port.
 
 When I SSH into ANY of my systems, I get prompted for my password right away, 
 but after entering, it takes 30+ seconds to get logged in and get a prompt so 
 I can work.
 
 I dont quite know what to look for here
 
 Does anyone have thoughts?

That sounds like a failing reverse DNS lookup or IDENT query dropped by a 
firewall so you wait for the timeout.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH slow

2010-01-18 Thread John R Pierce
Brett Serkez wrote:
 In /etc/ssh/sshd_config change:  to

 UseDNS no

or, fix the reverse delegation in DNS.its trying to look up the 
in-addr.arpa zone  for your IP, and the subnet delegation is broken and 
pointing to a black hole thats not replying





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH slow

2010-01-18 Thread ML
Brett, Les,

Thanks for the pointer, this worked. I knew it had to be DNS or maybe my system 
was really busy, but it is a very small web-server.

-Jason

On Jan 18, 2010, at 3:12 PM, Brett Serkez wrote:

 In /etc/ssh/sshd_config change:
 
 UseDNS yes
 
 to 
 
 UseDNS no
 
 Brett
 
 On Mon, Jan 18, 2010 at 6:08 PM, ML mailingli...@mailnewsrss.com wrote:
 Hi All,
 
 All of my systems are running 5.4 x64. The are all AMD x64 processors with at 
 least 2gb of RAM in each.
 
 I am running SSH on a non standard port.
 
 When I SSH into ANY of my systems, I get prompted for my password right away, 
 but after entering, it takes 30+ seconds to get logged in and get a prompt so 
 I can work.
 
 I dont quite know what to look for here
 
 Does anyone have thoughts?
 
 -Jason
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos