Re: Working out a OS X 10.4 Tiger ssh implementation issue, slow logins
From: Brendan Kwolek (bkwolek_at_nygh.on.ca)
To: Scott Haneda <email@example.com> Date: Mon, 06 Jun 2005 20:02:44 -0400
Blatantly stolen from http://www.macosxhints.com
After upgrading to Tiger, I noticed an infuriatingly long delay when
trying to connect to remote hosts via SSH in Terminal.
After some poking around, I finally figured out that SSH under 10.4 is
checking for IPv6 addresses as well as IPv4 addresses, and is hanging
until its search times out. The solution is simple:
Open up Terminal
Edit the /etc/ssh_config file as root (note this is
not /etc/sshd_config). Just type sudo emacs /etc/ssh_config; replace
emacs with your favorite editor
Add the following line to the file:
Save and close the file. Under emacs this is done via Control-X
Or, if you're uneasy about putting it into the config file for the
entire box, you could put it into ~/.ssh/config
YMMV, but it did work here, and from what I read, worked for many
----- Original Message -----
From: Scott Haneda <firstname.lastname@example.org>
Date: Monday, June 6, 2005 4:04 pm
Subject: Re: Working out a OS X 10.4 Tiger ssh implementation issue,
> on 6/6/05 9:22 AM, David Benfell at email@example.com wrote:
> > On Sat, 04 Jun 2005 16:20:28 -0700, Scott Haneda wrote:
> >> There are scattered reports, and various solutions to an issue
> where ssh
> >> logins take in excess of 30 seconds to instantiate a connection
> to a remote
> >> host. There are various workarounds, but there is no consensus.
> > <snip>
> >> debug3: Trying to reverse map address ip.add.re.ss.
> > <snip>
> >> If I change to my own recursive resolver, the problem does go
> >> However, this was not needed in 10.2 or 10.3 OS X. So in some
> ways, it does
> >> seem to be DNS related, but I am not sure just exactly where.
> > <snip>
> > I just compared the man pages for sshd_config from a 10.3 system
> and a
> > 10.4 system. In the 10.4 system, the VerifyReverseMapping
> option is
> > missing. I would suggest adding this option with an argument of
> Isnt sshd_config for the remote server end of the deal, not the
> client side,
> which is what is hanging?
> Scott Haneda Tel: 415.898.2602
> <" target="l">http://www.newgeo.com> Novato,
> CA U.S.A.
This email message and any attachments are intended only for the use of the individual to which it is addressed, and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the recipient of this email is not the intended recipient (or the employee or agent responsible for delivering the email to the intended recipient), you are hereby notified that any review, dissemination, distribution or copying or other use of this message is strictly prohibited. If you have received this communication in error, please notify the sender immediately by return email and delete this message and attachments from your system. Thank You.