From owner-freebsd-questions Mon Aug 19 13:18:44 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 921FB37B400 for ; Mon, 19 Aug 2002 13:18:42 -0700 (PDT) Received: from mail.seekingfire.com (coyote.seekingfire.com [24.72.10.212]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1254243E72 for ; Mon, 19 Aug 2002 13:18:42 -0700 (PDT) (envelope-from tillman@seekingfire.com) Received: from blues.seekingfire.prv (blues.seekingfire.prv [192.168.23.211]) by mail.seekingfire.com (Postfix) with ESMTP id 506C1133 for ; Mon, 19 Aug 2002 14:18:41 -0600 (CST) Received: (from tillman@localhost) by blues.seekingfire.prv (8.11.6/8.11.6) id g7JKInK04036 for freebsd-questions@FreeBSD.ORG; Mon, 19 Aug 2002 14:18:49 -0600 Date: Mon, 19 Aug 2002 14:18:48 -0600 From: Tillman Hodgson To: freebsd-questions@FreeBSD.ORG Subject: Re: OpenSSH authentication via public key very slow (4.6-STABLE, buildworld done today) Message-ID: <20020819141848.A4031@seekingfire.com> References: <20020819131256.A3672@seekingfire.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <20020819131256.A3672@seekingfire.com>; from tillman@seekingfire.com on Mon, Aug 19, 2002 at 01:12:57PM -0600 X-Urban-Legend: There is lots of hidden information in headers Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Aug 19, 2002 at 01:12:57PM -0600, Tillman Hodgson wrote: > After upgrading to 4.6-STABLE today, ras public key authentication is > very slow. It still works (the user isn't asked for a password and is > logged in), but there is a long delay: > > login as: tillman > Authenticating with public key "rsa-key-20020624" > > Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 (etc, etc) Turns out the problem was related to ipf and ipnat not starting (in spite of being in rc.conf), thus causing lookup delays. -T -- Knowledge is pitiless. - Orange Catholic Bible To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message