Re: [CentOS] ssh slow
but I put this to no the ssh is still slow any hints thank you --- On Wed, 5/5/10, John R Pierce pie...@hogranch.com wrote: From: John R Pierce pie...@hogranch.com Subject: Re: [CentOS] ssh slow To: CentOS mailing list centos@centos.org Received: Wednesday, May 5, 2010, 8:52 PM ann kok wrote: Hi How I can configure sshd_config to improve the ssh faster? It is slow to prompt the login badly configured reverse DNS on the client hosts is the most common cause of this. try ... UseDNS no ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
ann kok wrote: but I put this to no the ssh is still slow Did you restart the sshd service after the change? I don't know if it reads the config file otherwise. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
From: ann kok oiyan...@yahoo.ca ssh is still slow Tried to use verbose to see what's going on...? ssh -vvv JD ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4 machine, it does the same thing, i.e. it sort of hangs for a while then comes back after about 10-15 secs with a login prompt. I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT sshd_config) file on the Ubuntu box and *commenting out* the following fixes it immediately, without needing to restart anything: GSSAPIAuthentication yes GSSAPIDelegateCredentials no Change the above 2 lines to #GSSAPIAuthentication yes #GSSAPIDelegateCredentials no and try again. On 06/05/10 13:25, ann kok wrote: but I put this to no the ssh is still slow any hints thank you ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
On Thu, 2010-05-06 at 16:39 +0100, Khusro Jaleel wrote: I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4 machine, it does the same thing, i.e. it sort of hangs for a while then comes back after about 10-15 secs with a login prompt. I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT sshd_config) file on the Ubuntu box and *commenting out* the following fixes it immediately, without needing to restart anything: GSSAPIAuthentication yes GSSAPIDelegateCredentials no Change the above 2 lines to #GSSAPIAuthentication yes #GSSAPIDelegateCredentials no and try again. On 06/05/10 13:25, ann kok wrote: but I put this to no the ssh is still slow any hints thank you ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Try disabling both reverse DNS and GSSAPIAuthentication http://www.taiter.com/blog/2009/04/disabling-reverse-lookup-for-s.html Tait ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
On 5/6/10 10:20 AM, Tait Clarridge t...@clarridge.ca wrote: On Thu, 2010-05-06 at 16:39 +0100, Khusro Jaleel wrote: I've found that if I'm on an Ubuntu machine and SSHing to a Centos 5.4 machine, it does the same thing, i.e. it sort of hangs for a while then comes back after about 10-15 secs with a login prompt. I've found that editing the /etc/ssh/ssh_config (note ssh_config, NOT sshd_config) file on the Ubuntu box and *commenting out* the following fixes it immediately, without needing to restart anything: GSSAPIAuthentication yes GSSAPIDelegateCredentials no Change the above 2 lines to #GSSAPIAuthentication yes #GSSAPIDelegateCredentials no and try again. On 06/05/10 13:25, ann kok wrote: but I put this to no the ssh is still slow any hints thank you ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Try disabling both reverse DNS and GSSAPIAuthentication http://www.taiter.com/blog/2009/04/disabling-reverse-lookup-for-s.html Tait ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Unless of course you ARE using GSSAPI for auth (environment using Kerberos for auth), and then at that point, you need to look at the connection between you, the server in question, and your KDC. If that is having hiccups, you'll get slow authentication speeds. -- Gary L. Greene, Jr. IT Operations Minerva Networks, Inc. Cell: (650) 704-6633 Phone: (408) 240-1239 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
How I can configure sshd_config to improve the ssh faster? It is slow to prompt the login That usually indicates a DNS problem. sshd tries to do a reverse DNS resolution to lookup the connecting client. Barry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
I heard it before but how can be solved? Thank you --- On Wed, 5/5/10, Barry Brimer li...@brimer.org wrote: From: Barry Brimer li...@brimer.org Subject: Re: [CentOS] ssh slow To: CentOS mailing list centos@centos.org Received: Wednesday, May 5, 2010, 8:47 PM How I can configure sshd_config to improve the ssh faster? It is slow to prompt the login That usually indicates a DNS problem. sshd tries to do a reverse DNS resolution to lookup the connecting client. Barry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
ann kok wrote: Hi How I can configure sshd_config to improve the ssh faster? It is slow to prompt the login badly configured reverse DNS on the client hosts is the most common cause of this. try ... UseDNS no ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ssh slow
- Original Message From: ann kok oiyan...@yahoo.ca To: centos@centos.org Sent: Wed, May 5, 2010 9:44:12 PM Subject: [CentOS] ssh slow Hi How I can configure sshd_config to improve the ssh faster? It is slow to prompt the login Fix your DNS setup and/or configure it to UseDNS no. Such slowdowns happen because sshd tries to get a reverse DNS lookup of your IP address. It can be a big PITA when you try to login into a server to fix a broken DNS and the login times out because it tries to get a that PTR record back.. Just remember the mantra: most weird network problems are related to DNS problems. Fer ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSH slow
On 01/19/2010 12:26 AM, Les Mikesell wrote: ML wrote: Hi All, All of my systems are running 5.4 x64. The are all AMD x64 processors with at least 2gb of RAM in each. I am running SSH on a non standard port. When I SSH into ANY of my systems, I get prompted for my password right away, but after entering, it takes 30+ seconds to get logged in and get a prompt so I can work. I dont quite know what to look for here Does anyone have thoughts? That sounds like a failing reverse DNS lookup or IDENT query dropped by a firewall so you wait for the timeout. Try setting 'UseDNS no' in /etc/ssh/sshd_config. HTH, Timo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSH slow
In /etc/ssh/sshd_config change: UseDNS yes to UseDNS no Brett On Mon, Jan 18, 2010 at 6:08 PM, ML mailingli...@mailnewsrss.com wrote: Hi All, All of my systems are running 5.4 x64. The are all AMD x64 processors with at least 2gb of RAM in each. I am running SSH on a non standard port. When I SSH into ANY of my systems, I get prompted for my password right away, but after entering, it takes 30+ seconds to get logged in and get a prompt so I can work. I dont quite know what to look for here Does anyone have thoughts? -Jason ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSH slow
ML wrote: Hi All, All of my systems are running 5.4 x64. The are all AMD x64 processors with at least 2gb of RAM in each. I am running SSH on a non standard port. When I SSH into ANY of my systems, I get prompted for my password right away, but after entering, it takes 30+ seconds to get logged in and get a prompt so I can work. I dont quite know what to look for here Does anyone have thoughts? That sounds like a failing reverse DNS lookup or IDENT query dropped by a firewall so you wait for the timeout. -- Les Mikesell lesmikes...@gmail.com ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSH slow
Brett Serkez wrote: In /etc/ssh/sshd_config change: to UseDNS no or, fix the reverse delegation in DNS.its trying to look up the in-addr.arpa zone for your IP, and the subnet delegation is broken and pointing to a black hole thats not replying ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SSH slow
Brett, Les, Thanks for the pointer, this worked. I knew it had to be DNS or maybe my system was really busy, but it is a very small web-server. -Jason On Jan 18, 2010, at 3:12 PM, Brett Serkez wrote: In /etc/ssh/sshd_config change: UseDNS yes to UseDNS no Brett On Mon, Jan 18, 2010 at 6:08 PM, ML mailingli...@mailnewsrss.com wrote: Hi All, All of my systems are running 5.4 x64. The are all AMD x64 processors with at least 2gb of RAM in each. I am running SSH on a non standard port. When I SSH into ANY of my systems, I get prompted for my password right away, but after entering, it takes 30+ seconds to get logged in and get a prompt so I can work. I dont quite know what to look for here Does anyone have thoughts? -Jason ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos