Re: SSH login delay

From: Poul-Henning Kamp (phk@critter.freebsd.dk)
Date: 03/27/01 

To: Garance A Drosihn <drosih@rpi.edu>
Date: Tue, 27 Mar 2001 21:18:44 +0200
From: Poul-Henning Kamp <phk@critter.freebsd.dk>

In message <p05010400b6e69651daed@[128.113.24.47]>, Garance A Drosihn writes:
>At 8:03 AM -0600 3/27/01, George.Giles@mcmail.vanderbilt.edu wrote:
>>Does any one know what causes the long delay between entering
>>the password to ssh and the actual logging in of the shell prompt ?
>>
>>Sometimes it takes more than a minute when I know it is not
>>network speed ?
>
>When I've seen this, it is sometimes caused by problems in
>reverse-DNS resolution. If you're going from machine A to
>machine B and it is slow, then once you are on machine B
>try to DNS lookups on the IP address of machine A.

It can also be caused by lack of randomness in which case sshd
seems to fall back to a lot of gettimeofday() calls. 

--
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: SSH login delay
    ... >Does any one know what causes the long delay between entering ... >the password to ssh and the actual logging in of the shell prompt? ...
    (FreeBSD-Security)
  • Re: [HEADSUP] naming of tty devices.
    ... > I say not for logging, but for restoring full terminal name from short name. ... And you can always use "-O tty" to see the ... Ruslan Ermilov ... FreeBSD committer ...
    (freebsd-arch)