waiting a long time for a password prompt with SSH

[Tim Hempstead_1]

Got a bit of a strange one on several of our HP boxes.

If you SSH onto them then there is a long delay between the login and the password prompts (if coming in from Windows) or just obtaining the password prompt when coming from another HP box.

This is a bit odd as everything looks ok on all three of the affected systems. DNS is fine, (i can nslookup source and destination hosts and it appears to return straight away) and there doesn't appear to be anything wrong with any of the commands in the PRNG list.

Running ssh with the -vvv switch to see what is going on gives the pause where indicated below ...



debug1: Found key in /.ssh/known_hosts:1
debug2: bits set: 538/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /.ssh/id_rsa (00000000)
debug2: key: /.ssh/id_dsa (00000000)



debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug3: start over, passed a different list publickey,password,keyboard-interactive
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /.ssh/id_rsa
debug3: no such identity: /.ssh/id_rsa
debug1: Trying private key: /.ssh/id_dsa
debug3: no such identity: /.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethod_is_enabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 1
Password:

This even affects ssh'ing from host1 back to host1 ?

Anyone have any ideas?

Tim

[Arunvijai_4]

What version of SSH you are running ?

# swlist T1471AA will give the version information.

-Arun

[Tim Hempstead_1]

SSH version is A.03.81.002

Tim

[Arunvijai_4 · Accepted solution]

Try upgrading to A.04.10.004 on 11.11. I think, it was a known issue occur some times on 3.8.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

-Arun

[Denver Osborn]

To help narrow it down to a problem w/ your current ssh rev, have you tried using keyboard interactive auth only? If so, did you also see the "pause" when using just one auth? Just wondering if it could be a dns issue or problem w/ one of the auth methods and not ssh...

ssh -vvv -o PreferredAuthentications=keyboard-interactive user@host


hope this helps,
-denver

[Steven E. Protter]

Try installing strong randome number generation. This speeds up the process for some reason.

11i and above only.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=KRNG11I

SEP

[Tim Hempstead_1]

Ok, we upgraded SSH as suggested above and it cleared the problem.

We didn't have a chance to test Denvers suggestion before we upgraded but I agree that would have been a good thing to try. With Stevens suggestion we already had the package in question installed.

Thanks to all for replying.

[Tim Hempstead_1]

Closing thread as per above