[opgelost] Re: Inloggen SSH traag
Ik ben er uit! ;-) Het toevoegen van een IPv6 nameserver in /etc/resolv.conf lostte het probleem op. Er stonden daar alleen IPv4 nameservers. "UseDNS no" in /etc/ssh/sshd_config lost het probleem ook op. Maar waarom, dat weet ik niet. Op machines met Debian9 heb ik dit probleem niet, daar staan ook alleen IPv4 nameservers in /etc/resolv.conf... Groeten, Paul -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/
Re: Inloggen SSH traag
Dit zegt de server-kant, even een extra sshd gestart op poort . Het lijkt iets met PAM te maken te hebben, hmmm... -- root@kvm67:/var/log# /usr/sbin/sshd -d -p debug1: sshd version OpenSSH_6.7, OpenSSL 1.0.1t 3 May 2016 debug1: private host key: #0 type 1 RSA debug1: private host key: #1 type 2 DSA debug1: private host key: #2 type 3 ECDSA debug1: private host key: #3 type 4 ED25519 debug1: rexec_argv[0]='/usr/sbin/sshd' debug1: rexec_argv[1]='-d' debug1: rexec_argv[2]='-p' debug1: rexec_argv[3]='' Set /proc/self/oom_score_adj from 0 to -1000 debug1: Bind to port on 0.0.0.0. Server listening on 0.0.0.0 port . debug1: Bind to port on ::. Server listening on :: port . debug1: Server will not fork when running in debugging mode. debug1: rexec start in 5 out 5 newsock 5 pipe -1 sock 8 debug1: inetd sockets after dupping: 3, 3 Connection from 82.95.148.152 port 37242 on 91.198.178.67 port debug1: Client protocol version 2.0; client software version OpenSSH_7.4p1 Debian-10+deb9u3 debug1: match: OpenSSH_7.4p1 Debian-10+deb9u3 pat OpenSSH* compat 0x0400 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u4 debug1: permanently_set_uid: 104/65534 [preauth] debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] debug1: SSH2_MSG_KEXINIT sent [preauth] debug1: SSH2_MSG_KEXINIT received [preauth] debug1: kex: client->server chacha20-poly1...@openssh.com none [preauth] debug1: kex: server->client chacha20-poly1...@openssh.com none [preauth] debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth] debug1: SSH2_MSG_NEWKEYS sent [preauth] debug1: expecting SSH2_MSG_NEWKEYS [preauth] debug1: SSH2_MSG_NEWKEYS received [preauth] debug1: KEX done [preauth] debug1: userauth-request for user root service ssh-connection method none [preauth] debug1: attempt 0 failures 0 [preauth] -> wachten debug1: PAM: initializing for "root" debug1: PAM: setting PAM_RHOST to "server.vandervlis.nl" debug1: PAM: setting PAM_TTY to "ssh" debug1: userauth-request for user root service ssh-connection method publickey [preauth] debug1: attempt 1 failures 0 [preauth] debug1: test whether pkalg/pkblob are acceptable [preauth] debug1: temporarily_use_uid: 0/0 (e=0/0) debug1: trying public key file /root/.ssh/authorized_keys debug1: fd 4 clearing O_NONBLOCK debug1: matching key found: file /root/.ssh/authorized_keys, line 1 RSA 03:49:fe:52:1c:7f:bc:9d:fe:fa:5f:59:d7:45:98:c3 debug1: restore_uid: 0/0 Postponed publickey for root from 82.95.148.152 port 37242 ssh2 [preauth] debug1: userauth-request for user root service ssh-connection method publickey [preauth] debug1: attempt 2 failures 0 [preauth] debug1: temporarily_use_uid: 0/0 (e=0/0) debug1: trying public key file /root/.ssh/authorized_keys debug1: fd 4 clearing O_NONBLOCK debug1: matching key found: file /root/.ssh/authorized_keys, line 1 RSA 03:49:fe:52:1c:7f:bc:9d:fe:fa:5f:59:d7:45:98:c3 debug1: restore_uid: 0/0 debug1: do_pam_account: called -> wachten Accepted publickey for root from 82.95.148.152 port 37242 ssh2: RSA 03:49:fe:52:1c:7f:bc:9d:fe:fa:5f:59:d7:45:98:c3 debug1: monitor_child_preauth: root has been authenticated by privileged process debug1: monitor_read_log: child log fd closed debug1: PAM: establishing credentials -> wachten debug1: packet_set_postauth: called debug1: Entering interactive session for SSH2. debug1: server_init_dispatch_20 debug1: server_input_channel_open: ctype session rchan 0 win 1048576 max 16384 debug1: input_session_request debug1: channel 0: new [server-session] debug1: session_new: session 0 debug1: session_open: channel 0 debug1: session_open: session 0: link with channel 0 debug1: server_input_channel_open: confirm session debug1: server_input_global_request: rtype no-more-sessi...@openssh.com want_reply 0 debug1: server_input_channel_req: channel 0 request pty-req reply 1 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req pty-req debug1: Allocating pty. debug1: session_pty_req: session 0 alloc /dev/pts/2 debug1: Ignoring unsupported tty mode opcode 42 (0x2a) debug1: SELinux support disabled debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug1: server_input_channel_req: channel 0 request shell reply 1 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req shell Starting session: shell on pts/2 for root from 82.95.148.152 port 37242 debug1: Setting controlling tty using TIOCSCTTY. -- -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/
Re: Inloggen SSH traag
Op 06-04-18 om 16:04 schreef Frans van Berckel: > Paul, > > My two cents. > > On Fri, 2018-04-06 at 15:52 +0200, Paul van der Vlis wrote: >> Op 06-04-18 om 15:17 schreef Paul van der Vlis: >> >> De prompt was anders want ik had het als user "auto" uitgevoerd, dit >> is correct: >> >> auto@laptopp:~$ ssh -vv r...@kvm67.vandervlis.nl > > Ik weet het niet! Maar log ook eens via de console in en check de voor > zo'n sessie belangrijkste log files eens ... > > # cd /var/log > # tail -f auth.log daemon.log syslog > > En log dan gewoon even opnieuw in met ssh. Kijken of je wat aparts ziet > langs komen. Nee, alleen de gebruikelijke meldingen in auth.log. > Als alternatief kan je de load even checken. Ook weer op de console, > doe dat bijvoorbeeld met htop, als je met ssh inlogt. Dat staat niet op deze VM, maar met de gewone top krijg ik: load average: 0.00, 0.00, 0.00 Ik vind het ook een raar probleem. Groeten, Paul -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/
Re: Inloggen SSH traag
Paul, My two cents. On Fri, 2018-04-06 at 15:52 +0200, Paul van der Vlis wrote: > Op 06-04-18 om 15:17 schreef Paul van der Vlis: > > De prompt was anders want ik had het als user "auto" uitgevoerd, dit > is correct: > > auto@laptopp:~$ ssh -vv r...@kvm67.vandervlis.nl Ik weet het niet! Maar log ook eens via de console in en check de voor zo'n sessie belangrijkste log files eens ... # cd /var/log # tail -f auth.log daemon.log syslog En log dan gewoon even opnieuw in met ssh. Kijken of je wat aparts ziet langs komen. Als alternatief kan je de load even checken. Ook weer op de console, doe dat bijvoorbeeld met htop, als je met ssh inlogt. Met vriendelijke groet, -- Frans van Berckel Media Engineer / Linux Master LinkedIn: https://www.linkedin.com/in/fransvberckel/
Re: Inloggen SSH traag
Op 06-04-18 om 15:17 schreef Paul van der Vlis: > Hoi, > > Als ik de laatste tijd een nieuwe Jessie VM aanmaak (wat ik niet meer zo > vaak doe uiteraard), dan is daarna het inloggen via SSH erg traag. Ik > heb nog niet weten te achterhalen hoe dat kan. Ik gebruik steeds > hetzelfde master-image waar wellicht iets mis is. > Heeft hier misschien iemand een idee wat er aan de hand kan zijn? > > > paul@laptopp:~$ ssh -vv r...@kvm67.vandervlis.nl De prompt was anders want ik had het als user "auto" uitgevoerd, dit is correct: auto@laptopp:~$ ssh -vv r...@kvm67.vandervlis.nl > OpenSSH_7.4p1 Debian-10+deb9u3, OpenSSL 1.0.2l 25 May 2017 > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: /etc/ssh/ssh_config line 19: Applying options for * > debug2: resolving "kvm67.vandervlis.nl" port 22 > debug2: ssh_connect_direct: needpriv 0 > debug1: Connecting to kvm67.vandervlis.nl [91.198.178.67] port 22. > debug1: Connection established. > debug2: key: /home/auto/.ssh/id_rsa (0x55600fea67d0) > debug2: key: /home/auto/.ssh/id_dsa ((nil)) > debug2: key: /home/auto/.ssh/id_ecdsa ((nil)) > debug2: key: /home/auto/.ssh/id_ed25519 ((nil)) > debug2: service_accept: ssh-userauth > debug1: SSH2_MSG_SERVICE_ACCEPT received > > -> 10 sec. wachten > > debug1: Authentications that can continue: publickey,password > debug1: Next authentication method: publickey > debug1: Offering RSA public key: /home/auto/.ssh/id_rsa > debug2: we sent a publickey packet, wait for reply > debug1: Server accepts key: pkalg ssh-rsa blen 279 > debug2: input_userauth_pk_ok: fp > SHA256:5GUu1lLxYVYnio5ef7mgLcXAmH8NTSjdTvz9gsyvOOA > Enter passphrase for key '/home/auto/.ssh/id_rsa': > > -> 6 sec. wachten > > debug1: Authentication succeeded (publickey). > Authenticated to kvm67.vandervlis.nl ([91.198.178.67]:22). > debug1: channel 0: new [client-session] > debug2: channel 0: send open > debug1: Requesting no-more-sessi...@openssh.com > debug1: Entering interactive session. > debug1: pledge: network > > -> 6 sec. wachten > > debug2: callback start > debug2: fd 3 setting TCP_NODELAY > debug2: client_session2_setup: id 0 > debug2: channel 0: request pty-req confirm 1 > debug1: Sending environment. > debug1: Sending env LANG = nl_NL.UTF-8 > debug2: channel 0: request env confirm 0 > debug2: channel 0: request shell confirm 1 > debug2: callback done > debug2: channel 0: open confirm rwindow 0 rmax 32768 > debug2: channel_input_status_confirm: type 99 id 0 > debug2: PTY allocation request accepted on channel 0 > debug2: channel 0: rcvd adjust 2097152 > debug2: channel_input_status_confirm: type 99 id 0 > debug2: shell request accepted on channel 0 > The programs included with the Debian GNU/Linux system are free > software; the exact distribution terms for each program are described in > the individual files in /usr/share/doc/*/copyright. > > Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent > permitted by applicable law. > Last login: Fri Apr 6 15:01:54 2018 from server.vandervlis.nl > > -> 3 sec. wachten op prompt > > root@kvm67:~# > -- > > -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/
Inloggen SSH traag
Hoi, Als ik de laatste tijd een nieuwe Jessie VM aanmaak (wat ik niet meer zo vaak doe uiteraard), dan is daarna het inloggen via SSH erg traag. Ik heb nog niet weten te achterhalen hoe dat kan. Ik gebruik steeds hetzelfde master-image waar wellicht iets mis is. Heeft hier misschien iemand een idee wat er aan de hand kan zijn? paul@laptopp:~$ ssh -vv r...@kvm67.vandervlis.nl OpenSSH_7.4p1 Debian-10+deb9u3, OpenSSL 1.0.2l 25 May 2017 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug2: resolving "kvm67.vandervlis.nl" port 22 debug2: ssh_connect_direct: needpriv 0 debug1: Connecting to kvm67.vandervlis.nl [91.198.178.67] port 22. debug1: Connection established. debug2: key: /home/auto/.ssh/id_rsa (0x55600fea67d0) debug2: key: /home/auto/.ssh/id_dsa ((nil)) debug2: key: /home/auto/.ssh/id_ecdsa ((nil)) debug2: key: /home/auto/.ssh/id_ed25519 ((nil)) debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received -> 10 sec. wachten debug1: Authentications that can continue: publickey,password debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/auto/.ssh/id_rsa debug2: we sent a publickey packet, wait for reply debug1: Server accepts key: pkalg ssh-rsa blen 279 debug2: input_userauth_pk_ok: fp SHA256:5GUu1lLxYVYnio5ef7mgLcXAmH8NTSjdTvz9gsyvOOA Enter passphrase for key '/home/auto/.ssh/id_rsa': -> 6 sec. wachten debug1: Authentication succeeded (publickey). Authenticated to kvm67.vandervlis.nl ([91.198.178.67]:22). debug1: channel 0: new [client-session] debug2: channel 0: send open debug1: Requesting no-more-sessi...@openssh.com debug1: Entering interactive session. debug1: pledge: network -> 6 sec. wachten debug2: callback start debug2: fd 3 setting TCP_NODELAY debug2: client_session2_setup: id 0 debug2: channel 0: request pty-req confirm 1 debug1: Sending environment. debug1: Sending env LANG = nl_NL.UTF-8 debug2: channel 0: request env confirm 0 debug2: channel 0: request shell confirm 1 debug2: callback done debug2: channel 0: open confirm rwindow 0 rmax 32768 debug2: channel_input_status_confirm: type 99 id 0 debug2: PTY allocation request accepted on channel 0 debug2: channel 0: rcvd adjust 2097152 debug2: channel_input_status_confirm: type 99 id 0 debug2: shell request accepted on channel 0 The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. Last login: Fri Apr 6 15:01:54 2018 from server.vandervlis.nl -> 3 sec. wachten op prompt root@kvm67:~# -- -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/
