topic Re: Slow password authentication in Operating System - HP-UX

Slow password authentication

Terrence — Thu, 05 Apr 2007 13:42:11 GMT

I have an rp7420 that has a distinct pause after we type in the password. It's running 11.23 in a service guard cluster. The other node in the cluster doesn't have this behavior. There's no delay at all during any other part of the connection/login process.

The server itself is rarely all that busy and averages 7% CPU and disk utilization.

The delay isn't bad but it's the first time I've seen this and I don't want it to worsen.

Has anyone seen this before?

Re: Slow password authentication

Court Campbell — Thu, 05 Apr 2007 13:45:35 GMT

Is this with every logon attempt? Also how are you logging in, e.g., ssh, console, telnet. It could be dns. I have seen pauses in logins while the service does a reverse dns lookup.

Re: Slow password authentication

Terrence — Thu, 05 Apr 2007 13:50:56 GMT

The delay is everytime and happens with both telnet and ssh. Also it happens only during password authentication not during connection so DNS doesn't enter into it.

It also happens when I su. The other server in the cluster is identical and it doesn't have the problem.

Re: Slow password authentication

Sandman! — Thu, 05 Apr 2007 13:56:02 GMT

What do you use for password authentication? Is it local or vendor/third party software like DCE?

Re: Slow password authentication

Terrence — Thu, 05 Apr 2007 14:03:32 GMT

Local authentication, nothing fancy or unusual.

Re: Slow password authentication

Steven E. Protter — Thu, 05 Apr 2007 14:04:37 GMT

Shalom,

Yes, I saw it today while I was resurrecting two old D class boxes in my apartment.

The problem was because the /etc/hosts file did not contain a record for the machine I was logging in to.

For some reason login response is nasty slow on HP-UX systems when nsswitch.conf checks files first and the secondary DNS server is slow or Microsoft(or both).

Making sure there is a valid /etc/hosts entry for exactly how your user log in will probably help.

Lets say the host ip is 192.168.0.10

/etc/hosts

192.168.0.10 galactica galactica.your.net

You will notice I covered the shortname and the fdqn or fully qualified domain name.

Also check /etc/resolv.conf

If those servers can not be contacted or are slow it will make login seem interminable.

Slow response on the hostname lookups of the client machines can also contribute to this problem.

SEP

Re: Slow password authentication

Terrence — Thu, 05 Apr 2007 15:49:20 GMT

The hosts file is identical to it's twin in the SG cluster which does not have the pause. All entries in the hosts file are accurate. Also this event happens during the password authentication only so there is no DNS activity as part of this action.

The DNS entries are correct and resolv.conf is also configured correctly.

Re: Slow password authentication

A. Clay Stephenson — Thu, 05 Apr 2007 16:07:44 GMT

Are you running NIS, LDAP, or local passwords? Are the user's home directories local or NFS mounted? Try killing the pwgrd daemon and see if the behavior changes. You don't even need to restart it.