- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- SSH Authentification very slow on HPUX 11.31
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-19-2009 11:52 AM
тАО02-19-2009 11:52 AM
Re: SSH Authentification very slow on HPUX 11.31
I've just tried out another SSH Client for Windows called SftpDrive. Here's a screenshot clearly showing the 2 options...
Thanks again.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-24-2009 11:57 AM
тАО02-24-2009 11:57 AM
Re: SSH Authentification very slow on HPUX 11.31
KerberosAuthentication no
That way, it's fast. I still don't get it. We're not using Kerberos in any way. The following configs are the same (from good to bad server):
- pam.conf
- pam.krb5
- sshd_config
- nsswitch.conf
and I probably checked some others... but don't recall... checked so many things...
Any clues why? Missing patch perhaps? Kernel config??
Thanks again. Pat
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-24-2009 03:01 PM
тАО02-24-2009 03:01 PM
Re: SSH Authentification very slow on HPUX 11.31
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-25-2009 08:23 AM
тАО02-25-2009 08:23 AM
Re: SSH Authentification very slow on HPUX 11.31
Feb 25 09:14:01 blux5 sshd[4061]: SSH: Server;Ltype: Version;Remote: 192.168.87.132-3870;Protocol: 2.0;Client: PuTTY_Release_0.60
Feb 25 09:16:01 blux5 sshd[4061]: Accepted password for root from 192.168.87.132 port 3870 ssh2
However, just noticed... the delay to get in seems to be *always* exactly 2 minutes. It's some kind of timeout... but where? I don't know.. :(
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-25-2009 08:31 AM
тАО02-25-2009 08:31 AM
Re: SSH Authentification very slow on HPUX 11.31
In our case, with KerberosAthentication enabled or disabled (kerberos works fine, actually), a login or command execution takes 100-120 seconds. Inexplicably, root login is fast though login for other local users is still slow. Truss-ing the sshd process yields nothing that would obviously account for this.
I downgraded to 5.0 and suddenly all is fixed. Login is fast, krb5/GSSAPI login works fine, no obvious issues anywhere.
HP should probably take down that build, it clearly has some problems...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-25-2009 08:37 AM
тАО02-25-2009 08:37 AM
Re: SSH Authentification very slow on HPUX 11.31
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA
But can't see it there... Can you tell me where? Thanks so much.
Pat.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО02-25-2009 09:11 AM
тАО02-25-2009 09:11 AM
Re: SSH Authentification very slow on HPUX 11.31
There is a non-kerberized package available here: http://hpux.cs.utah.edu/ and openssh does build pretty easily with kerberos enabled (krb5 complicates things quite a bit).
If anyone knows if/where previous versions are available, it would really be helpful; I had to downgrade my 11.11 boxes all the way to 4.1 because it was the only other package I had available.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-02-2009 09:42 PM
тАО06-02-2009 09:42 PM
Re: SSH Authentification very slow on HPUX 11.31
this thread was very helpful for us.
i rolled out SecureShell A.05.10.X on our HPUX 11.23 / 11.31 servers (after testing a few weeks on some test and production server). On one HPUX 11.31 server we use SecureShell extremely intensive, after the installation it wasn't possible to login with SSH in a acceptable time. one SSH process use about 60 % of a CPU ! the solution to solve the problem:
Purge /var/adm/wtmp and /var/adm/wtmps.
/var/adm/wtmps had about 500 MB ! (yes we will reorganize it in the future)
also in the installation description for A.05.10.X is no prerequisite. but there is a prerequisite : OpenSSL A.00.09.8j !!! SSH doesn't work on HPUX 11.31 with a older version => Fatal Error.
Be careful with SecureShell A.05.10.X
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-03-2009 05:10 AM
тАО06-03-2009 05:10 AM
Re: SSH Authentification very slow on HPUX 11.31
If I recall right, it turns out I had to set 'KerberosAuthentication = no' in sshd_config of my problematic server to resolve this. I know, it's more of a patch then a real fix, but at the time, since we aren't using Kerberos, figured it did the trick...
Cheers!
P.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-10-2009 06:46 AM
тАО08-10-2009 06:46 AM
Re: SSH Authentification very slow on HPUX 11.31
i sniffed with nettl and it looks like that ssh make a false dns-request. after entering password and pressing 'enter' the client makes a dns-request and asks for _kerberos.int...after 5 seconds and no answer the client repeats his request...again 5 seconds of silence. then the dns-server answers with a failure. after that the client asks for _kerberos.admin.int and the dns-server answers succesfully without any interruption!
our domain is "admin.int"...not only "int"! it seems that the first 2 requests are simply false.