Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Jan 2005 17:34:01 -0600
From:      luke <lgrady@gmail.com>
To:        freebsd <freebsd-questions@freebsd.org>
Subject:   slow ssh since upgrade from 5.3-release-p4 to p5
Message-ID:  <5fee5e30050121153451747114@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
i have an smp system and just upgraded from p4 to p5 of 5.3-release. since the 
upgrade, ssh seems to be hanging at pam authentication. i've messed around with
/etc/pam.d/sshd and tried various configurations.
i've put ChallengeResponseAuthentication yes in sshd_config instead of
yes. i even
installed openssh-portable from ports, and it has the same issues. 

output of sshd -d (it's OpenSSH_3.8.1p1)

debug1: Bind to port 234 on 0.0.0.0.
Server listening on 0.0.0.0 port 234.
debug1: Server will not fork when running in debugging mode.
debug1: res_init()
Connection from 66.142.109.139 port 1666
debug1: Client protocol version 2.0; client software version PuTTY-Release-0
debug1: no match: PuTTY-Release-0.56
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1 FreeBSD-20040419
debug1: permanently_set_uid: 22/22
debug1: list_hostkey_types: ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: client->server aes256-cbc hmac-sha1 none
debug1: kex: server->client aes256-cbc hmac-sha1 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST_OLD received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done

then there is a long pause here

debug1: userauth-request for user verbose service ssh-connection method none
debug1: attempt 0 failures 0
debug1: PAM: initializing for "verbose"
Failed none for verbose from 66.142.109.139 port 1666 ssh2
debug1: userauth-request for user verbose service ssh-connection
method keyboard-interactive
debug1: attempt 1 failures 1
debug1: keyboard-interactive devs
debug1: auth2_challenge: user=verbose devs=
debug1: kbdint_alloc: devices 'pam'
debug1: auth2_challenge_start: trying authentication method 'pam'

another long pause, then password prompt(i'm using putty v0.56)

debug1: PAM: setting PAM_RHOST to "adsl-66-142-109-139.dsl.crchtx.swbell.net"
Postponed keyboard-interactive for verbose from 66.142.109.139 port 1666 ssh2

another shorter pause

debug1: PAM: num PAM env strings 0
Postponed keyboard-interactive/pam for verbose from 66.142.109.139
port 1666 ssh2
Accepted keyboard-interactive/pam for verbose from 66.142.109.139 port 1666 ssh2
Accepted keyboard-interactive/pam for verbose from 66.142.109.139 port 1666 ssh2
debug1: monitor_child_preauth: verbose has been authenticated by
privileged process
debug1: PAM: reinitializing credentials
debug1: Entering interactive session for SSH2.
debug1: server_init_dispatch_20
debug1: server_input_channel_open: ctype session rchan 256 win 16384 max 16384
debug1: input_session_request
debug1: channel 0: new [server-session]
debug1: session_new: init
debug1: session_new: session 0
debug1: session_open: channel 0
debug1: session_open: session 0: link with channel 0
debug1: server_input_channel_open: confirm session
debug1: server_input_channel_req: channel 0 request pty-req reply 1
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req pty-req
debug1: Allocating pty.
debug1: session_new: init
debug1: session_new: session 0
debug1: session_pty_req: session 0 alloc /dev/ttyp1
debug1: server_input_channel_req: channel 0 request shell reply 1
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req shell
debug1: PAM: setting PAM_TTY to "/dev/ttyp1"
debug1: Setting controlling tty using TIOCSCTTY.

thanks for any help



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5fee5e30050121153451747114>