it takes a long long long time to time-out a login attempt

2004-03-24 Thread Vasil Dimov
 On Sat, Mar 13, 2004 at 04:21:58AM -0800, Sameer wrote:
  I'm trying to ssh into my FreeBSD (5.2.1-release sparc version) box from my
  desktop, however, it'll take a few seconds for the login as prompt to
  appear.  I enter my the user name and hit enter. the login attempt then sits
  there for about 90 seconds w/o asking for the password, then the connection
  times out.
 
 
 
  Any ideas what's causing this?  Do I need to put the workstation's
  information into the hosts file or something?
 
 
 
  The funny thing is that when I ssh from another server that's on the same
  VLAN as the FreeBSD box (I should mention that the workstation is on a
  different VLAN) the login process happens immediately.
 
 Sounds like classic DNS timeout problems.  When you ssh into a box, it
 will look up the IP number you're coming from in the DNS, and then
 lookup the hostname it derives from that to make sure that the IP
 number appears as listed for that address.

OpenSSH_3.6.1p1 FreeBSD-20030924

Not exactly.
sshd always tries to lookup IPaddr-hostname, but makes the
hostname-IPaddr match check only if VerifyReverseMapping is on in
sshd_config(5). It is off by default.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


it takes a long long long time to time-out a login attempt

2004-03-24 Thread Vasil Dimov
 On Sat, 13 Mar 2004, Sameer wrote:
 
  I'm trying to ssh into my FreeBSD (5.2.1-release sparc version) box
  from my desktop, however, it'll take a few seconds for the login as
  prompt to appear.  I enter my the user name and hit enter. the login
  attempt then sits there for about 90 seconds w/o asking for the
  password, then the connection times out.  Any ideas what's causing
  this?
 
 
 Put UseDNS no (without the quotes!) into /etc/ssh/sshd_config

No such option in sshd_config(5), are you talking about the ssh from the
base system? OpenSSH_3.6.1p1 FreeBSD-20030924?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


it takes a long long long time to time-out a login attempt

2004-03-23 Thread Vasil Dimov
 I'm trying to ssh into my FreeBSD (5.2.1-release sparc version) box from my
 desktop, however, it'll take a few seconds for the login as prompt to
 appear.  I enter my the user name and hit enter. the login attempt then sits
 there for about 90 seconds w/o asking for the password, then the connection
 times out.
 
 Any ideas what's causing this?  Do I need to put the workstation's
 information into the hosts file or something?
 
 The funny thing is that when I ssh from another server that's on the same
 VLAN as the FreeBSD box (I should mention that the workstation is on a
 different VLAN) the login process happens immediately.
 
 Any ideas what gives?

sshd is trying to reverse map the addres client is coming from and no responze
is returned back by the nameserver.

the login as:  prompt is given by the client prog without even talking to
the sshd server - that's why it comes to you in a few seconds.

Try the following:
1. add hosts(5) entry in the server's hosts file for the client ip address
2. write the following in /etc/nsswitch.conf:
hosts: files [unavail=return] dns

NOTE: hosts: files dns should also do the work, but it does not.
see: getnameinfo(3) called from sshd finds error in /etc/hosts? in
freebsd-questions@ I am still digging to find the answer.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]