passwd promting delay.

[fizan]

in non -trusted hp-ux 2660 where will be the user defined policies will be set.

while login into server it asks imdtly for login id::
but takes time foe asking passwd::

so time delay in checking whether the user exists there in box or not.

i alternately checked with the one more user it also takes time delay.

[fizan]

why nobody in the forum replies for the quiries whether am asking any ting wrongly

[Johnson Punniyalingam]

it depends on the load of your server,

[johnsonpk]

Hi Fizan,

Are you using ssh to login ? what is the os version? user security poicies are set in /etc/default/security

Regards!
johnson

[fizan]

# sar 1 5

HP-UX las7003 B.11.11 U 9000/800 12/10/09

17:07:51 %usr %sys %wio %idle
17:07:52 0 0 0 100
17:07:53 0 0 0 100
17:07:54 0 0 0 100
17:07:55 0 0 0 100
17:07:56 0 0 0 100

Average 0 0 0 100
#

[fizan]

ya am using ssh login

swlist -l product |grep -i secure
Secure_Shell A.04.50.020 HP-UX Secure Shell
openssl A.00.09.07l.006 Secure Network Communications Protocol

# uname -a
HP-UX B.11.11 U 9000/800 2232264185 unlimited-user license

[Johnson Punniyalingam · Accepted solution]

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1260439922478+28353475&threadId=780226

[Johnson Punniyalingam]

To eliminate the potential delay due to name resolution, add the hostnames to /etc/hosts and update nsswitch.conf to have file before dns lookup.

[fizan]

in /etc/nsswitch.conf also

passwd: compat
group: compat
hosts: files dns [NOTFOUND=return]
networks: nis [NOTFOUND=return] files
protocols: nis [NOTFOUND=return] files
rpc: nis [NOTFOUND=return] files
publickey: nis [NOTFOUND=return] files
netgroup: nis [NOTFOUND=return] files
automount: files nis
aliases: files nis
services: nis [NOTFOUND=return] files

its correct only

[johnsonpk]

Hi,

Can you check the dns lookup seetings in the ssh configuration file?

look for an entry "UseDNS yes " in /etc/opt/ssh/sshd_config file ..If it is yes try changing it to no and restart sshd daemon.

#/sbin/init.d/secsh stop
AND
#/sbin/init.d/secsh start
Note: this starting and stopping wont affect curret running ssh connection..how ever be sure to have console opened as an alternative.


Regards!
Johnson