Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: OEL 6.3 :Slow login due to /etc/ssh/sshd_config configuration
Top Forums UNIX for Advanced & Expert Users OEL 6.3 :Slow login due to /etc/ssh/sshd_config configuration Post 302810201 by John K on Tuesday 21st of May 2013 11:29:28 AM
Old 05-21-2013
OEL 6.3 :Slow login due to /etc/ssh/sshd_config configuration
Version: Oracle Enterprise Linux 6.3
Running on VMWare Workstation


When I login to my Linux VM from putty, the third line prompting for password comes only after few seconds.

Code:
login as: root
Access denied
root@192.168.0.235's password: ---> It takes around 5 seconds to get this prompt

I managed to fix this issue after several trial and error experiments.
I have to do both Step1 and Step2 mentioned below to fix this issue. Doing either one of Step1 and Step2 won't fix the issue

Step1.
In
Code:
/etc/ssh/sshd_config file

Comment the line
Code:
GSSAPIAuthentication yes

and
Remove the comment for the line
Code:
 GSSAPIAuthentication no

sshd_config file should look like below

Code:
grep GSSAPI /etc/ssh/sshd_config
# GSSAPI options
GSSAPIAuthentication no
#GSSAPIAuthentication yes
#GSSAPICleanupCredentials yes
GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no

Step2. In /etc/ssh/sshd_config file
I commented the line
Code:
UseDNS yes

and then
uncommented
Code:
UseDNS no


and did a restart using
Code:
/etc/init.d/sshd restart

Soon, I'll have to use DNS functionality for this VM. So, I am worried that the above change ("UseDNS no") will prevent the VM from using the DNS service.
Is there any other workaround to make the login quick?
 

10 More Discussions You Might Find Interesting

1. Solaris

Solaris 9 slow login thru ssh & ftp

When I ssh to my box, an Ultra 5. I get prompted for password immediately. I enter it and have to wait sometimes a full minute for it to prompt for a password. The same thing happens when i try to ftp to the box, it will say connected, but it takes forever to prompt for password, and... (2 Replies)
Discussion started by: BG_JrAdmin
2 Replies

2. UNIX for Dummies Questions & Answers

Painfully Slow SSH login on Solaris box

Running open solaris on a e420 that I recently picked up. Having issues sshing to it from either of my Linux boxes as its very slow to login (from the solaris box to the linux box it connects just fine. Here is the output of ssh -vvv. I have hightlighted where it seems the slowdown is. Does... (0 Replies)
Discussion started by: creedog
0 Replies

3. Solaris

Slow Login

Hi All, I have problem when i write my user name to login to my server late (about 10 min) to give me field of password if u know how i can solve it? Thanks (4 Replies)
Discussion started by: mass1123
4 Replies

4. Red Hat

sshd_config default configuration

Hi All, On /etc/ssh/sshd_config remark, many of the lines are commented out, like below #PubkeyAuthentication yes Does that mean the default of PubkeyAuthentication is no (or yes)? Thanks for any comment you may add. (1 Reply)
Discussion started by: itik
1 Replies

5. Solaris

Slow login via SSH

Hi Guys and Girls, I know this is a common question but I've searched and we've tried the suggestions without luck. When I log into the box via SSH from a windows machine I get a 1 min 20 sec delay. If we add my IP address and machine name to /etc/hosts then I get an instant login. I would be happy... (12 Replies)
Discussion started by: MikeKulls
12 Replies

6. Shell Programming and Scripting

Net::SSH::Perl slow to login.

I have some sample code that's supposed to ssh to another machine using Net::SSH::Perl, execute a command, and print the output of that command. It's very basic, and it works. However, I noticed that upon logging in: $ssh->login('username','password'); It takes roughly 10-13 seconds to... (2 Replies)
Discussion started by: mrwatkin
2 Replies

7. Solaris

Open Indiana 151a - Slow SSH Login

Hi, I have the following issue, when I tried to login to an Openindiana remote server through ssh It takes to long to ask me for the password. So i tried -v and I realize that sshd hangs here " debug1: SSH2_MSG_SERVICE_ACCEPT received " for at least 2 minutes. Then I can log in and everything is... (2 Replies)
Discussion started by: piukeman
2 Replies

8. Shell Programming and Scripting

Script to check and modify /etc/ssh/sshd_config

Hi, How can I check and modify /etc/ssh/sshd_config parameters in a script? I'll particular to check and enable / disable PasswordAuthentication and PubkeyAuthentication. I know I can edit sshd_config by vi, but for some reason we need change it in a script. Thank you. hce (9 Replies)
Discussion started by: hce
9 Replies

9. Red Hat

Sshd_config file issue, not able to login, need urgent help.

Hello all, By mistake i edited sshd_config file and made passwordauthentication no , Now i don't have key to login. Is there any way, i can revert the changes, I am not able to login to the box at well. Need help. Thanks, saurau (3 Replies)
Discussion started by: saurau
3 Replies

10. Shell Programming and Scripting

Ssh fails due to argument position.

I have a constraint to follow organization policy. So i do not have much liberty. ssh -i /opt/nonprod user1@hostone -t bash works while ssh -i /opt/nonprod -t bash user1@hostone fails How can I get this to work when I am enforced to put -t bash before the user@hostname ? Will share debug... (3 Replies)
Discussion started by: mohtashims
3 Replies

LEARN ABOUT MINIX

login.krb5

LOGIN(8)						      System Manager's Manual							  LOGIN(8)

NAME

       login.krb5 - kerberos enhanced login program

SYNOPSIS

       login.krb5 [-p] [-fFe username] [-r | -k | -K | -h hostname]

DESCRIPTION

       login.krb5  is a modification of the BSD login program which is used for two functions.	It is the sub-process used by krlogind and telnetd
       to initiate a user session and it is a replacement for the command-line login program which, when invoked with a  password,  acquires  Ker-
       beros tickets for the user.

       login.krb5  will  prompt  for a username, or take one on the command line, as login.krb5 username and will then prompt for a password. This
       password will be used to acquire Kerberos Version 5 tickets (if possible.) It will also attempt to run aklog to	get  AFS  tokens  for  the
       user.  The  version 5 tickets will be tested against a local krb5.keytab if it is available, in order to verify the tickets, before letting
       the user in. However, if the password matches the entry in /etc/passwd the user will be unconditionally	allowed  (permitting  use  of  the
       machine in case of network failure.)

OPTIONS

       -p     preserve the current environment

       -r hostname
	      pass hostname to rlogind.  Must be the last argument.

       -h hostname
	      pass hostname to telnetd, etc.  Must be the last argument.

       -f name
	      Perform pre-authenticated login, e.g., datakit, xterm, etc.; allows preauthenticated login as root.

       -F name
	      Perform pre-authenticated login, e.g., datakit, xterm, etc.; allows preauthenticated login as root.

       -e name
	      Perform pre-authenticated, encrypted login.  Must do term negotiation.

CONFIGURATION

       login.krb5  is  also  configured via krb5.conf using the login stanza. A collection of options dealing with initial authentication are pro-
       vided:

       krb5_get_tickets
	      Use password to get V5 tickets. Default value true.

       krb_run_aklog
	      Attempt to run aklog. Default value false.

       aklog_path
	      Where to find it [not yet implemented.] Default value $(prefix)/bin/aklog.

       accept_passwd
	      Don't accept plaintext passwords [not yet implemented]. Default value false.

DIAGNOSTICS

       All diagnostic messages are returned on the connection or tty associated with stderr.

SEE ALSO

       rlogind(8), rlogin(1), telnetd(8)

																	  LOGIN(8)
All times are GMT -4. The time now is 03:35 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy