Re: ssh initial connects SLOW

Nico Kadel-Garcia <nkadel@xxxxxxxxx> writes:

Randy Yates wrote:
Randy Yates <yates@xxxxxxxx> writes:

Randy Yates <yates@xxxxxxxx> writes:
[...]
Problem solved. In reading the -vvv output I posted, I realized the
client was attempting the GSSI... authentication method first, then
publickeys. In reading the man page for ssh, there is a
PreferredAuthentications option that can be set in
ssh_config. Enteringthe following line in /etc/ssh/ssh_config,

PreferredAuthentications publickey,hostbased,keyboard-interactive,password

(on both sides) solved the problem.

Note that the reason WHY the authentication order changed ON BOTH SIDES
is still a mystery. Perhaps I yum updated both sides' openssh
applications without realizing it recently, and the default
authentication order changed between the old openssh and the new.

Did you have an "/etc/ssh/ssh_config.rpmsave" lying around?

No.

And /var/log/rpmpkgs* should reveal any changes in your packages over
the last few days.

Those files seem to list every package that is installed. Diffing
between two versions of the does not reveal an ssh update either.
--
% Randy Yates % "Bird, on the wing,
%% Fuquay-Varina, NC % goes floating by
%%% 919-577-9882 % but there's a teardrop in his eye..."
%%%% <yates@xxxxxxxx> % 'One Summer Dream', *Face The Music*, ELO
http://www.digitalsignallabs.com
.

Relevant Pages

  • Re: ssh initial connects SLOW
    ... In reading the -vvv output I posted, ... applications without realizing it recently, ... authentication order changed between the old openssh and the new. ...
    (comp.security.ssh)
  • Re: ssh initial connects SLOW
    ... authentication method first, then publickeys. ... In reading the man page for ssh, ... authentication order changed between the old openssh and the new. ...
    (comp.security.ssh)
  • Re: two SSH compatibility scenarios: can it work?
    ... We are required to use SSH to log into the Engineering lab machines. ... > server software displays this header upon telnet connection to port 22. ... I still use Windows on my notebook for application compatibility. ... > running OpenSSH 3.4p1. ...
    (comp.security.ssh)
  • Re: OpenSSH, Telnet, Windows Authentication and double-hops
    ... deployment on a Windows network. ... Does this mean that you are setting SSH port forwarding ... does not provide the other side with either a Kerberos ticket, ... We're focusing on the OpenSSH for Windows distribution. ...
    (comp.security.ssh)
  • Re: ssh compatability issues
    ... >> without keeping two versions of ssh around on my home computer. ... running the OpenSSH server that comes with Solaris ... By 'some old security problems with that' I was not sure if you meant ...
    (comp.security.ssh)