delay after ssh'ing into a server

[Stephen Carville]

Bill Tangren wrote:
> Mahesh Pokala wrote:
>> Check /etc/resolv.conf  for valid dns entries
>> Check /etc/nsswitch.conf  for valid entries.
>>
> 
> I don't see anything unusual in them, and I haven't changed them. Also, 
> they are the same as the same files on the other servers, and those 
> servers don't have this problem. I've tried this from several different 
> servers. I've also asked others to try, and they have the same problem.

try ssh -vv user at wherever to see where the hang is happening.

On the server try dig -x client.IP.add.ress to be sure reverse DNS works.

>> Mahesh
>>
>> -----Original Message-----
>> From: redhat-list-bounces at redhat.com 
>> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Bill Tangren
>> Sent: Thursday, October 05, 2006 1:29 PM
>> To: General Red Hat Linux discussion list
>> Subject: delay after ssh'ing into a server
>>
>> I am having an odd problem with one of my RHEL servers. When I issue 
>> the command to ssh into it:
>>
>> $ ssh aa
>>
>> there is a 30 second delay before I get the password prompt. I tried 
>> deleting the appropriate line in ~/.ssh/known-hosts and trying it 
>> again, but I still got a 30 second delay before I got this message:
>>
>> The authenticity of host 'aa (10.1.5.93)' can't be established.
>> RSA key fingerprint is <a:long:hex:number>.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added 'aa,10.1.5.93' (RSA) to the list of known 
>> hosts.
>>
>> This is what the log looks like during this time:
>>
>> Oct  5 14:52:30 aa xinetd[3098]: START: ssh pid=23524 from=10.1.5.58 
>> Oct  5 18:53:12 aa sshd[23567]: Accepted password for bjt from 
>> 10.1.5.58 port
>> 32818 ssh2
>> Oct  5 14:53:12 aa sshd[23524]: Accepted password for bjt from 
>> 10.1.5.58 port
>> 32818 ssh2
>>
>> Notice the 42 second time delay. The first line appeared in the log 
>> just after I send the "ssh aa" command.
>>
>> I must have done something to make the system delay after receiving 
>> the connection request, but I can't imagine what. Googling turned up 
>> nothing for me.
>>
>> Any ideas?
>>
>> Bill Tangren
>>
>> -- 
>> redhat-list mailing list
>> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>> https://www.redhat.com/mailman/listinfo/redhat-list
>>
>>
> 


-- 
Stephen Carville <stephen at totalflood.com>
Unix and Network Admin
Nationwide Totalflood
6033 W. Century Blvd
Los Angeles, CA 90045
310-342-3602