Re: sshd login stalling

2006-09-05 Thread backyard


--- Noah <[EMAIL PROTECTED]> wrote:

> backyard wrote:
> > --- Noah <[EMAIL PROTECTED]> wrote:
> >
> >   
> >> Okay I cant seem to figure out why sshd logins
> are
> >> stalling.  I see that 
> >> I am coming from an IP address that does not have
> >> Reverse mapping.
> >>
> >> So I added the lines below to
> >> /usr/local/etc/ssh/sshd_config
> >> and /etc/ssh is sym linked to /usr/local/etc/ssh
> >>
> >> --- snip ---
> >> lrwxr-xr-x  1 root  wheel18 Sep  4 23:01
> ssh
> >> -> /usr/local/etc/ssh
> >>
> >> UseDNS no
> >> VerifyReverseMapping no
> >>
> >>  snip ---
> >>
> >>
> >> cheers,
> >>
> >> Noah
> >> 
> >
> >
> > just a thought but if /etc/ssh is linked to
> > /usr/local/etc/ssh wouldn't that just cause
> troubles
> > from the ghetco? My understanding is
> /usr/local/etc is
> > for local specific configurations so that a site
> > specific configuration in /etc can be loaded and
> > appended by the stuff in /usr/local/etc. Wouldn't
> > symlinking one to the other force the same config
> > files to be loaded twice??? And if so wouldn't
> that
> > possibly confuse the daemon? Maybe I'm not
> entirely
> > clear on how all that works myself. but my
> > understanding is /etc is read first and then
> appended
> > by /usr/local/etc. Although I can see how this
> would
> > allow NFS to be used on diskless clients using
> generic
> > /etc while allowing system specific configurations
> to
> > be stored elsewhere and linked in as needed. I am
> just
> > under the impression that /usr/local/etc is not
> for
> > this purpose. of course I'm not the brightest tool
> in
> > the shed...
> >   
> 
> 
> 
> Well currently if I am coming from an IP address the
> has reverse mapping 
> then things work fine there is no stalling
> whatsoever.  When I removed 
> the sym link between /etc/ssh and /usr/local/etc/ssh
> things work fine 
> now.  these is still stalling experienced when
> coming from an machine 
> with a non-reverse mapped IP.
> 
> other clues?
> 
> cheers,
> 
> Noah
> 
> 

do you have a firewall setup or any other packet
filtering going on on the box? Is this problem only
with sshd or do all daemons have trouble with a host
that doesn't do reverse-lookups? Perhaps the IP stack
is just blocking the packets coming in from non-fully
qualified hosts.


-brian
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sshd login stalling

2006-09-05 Thread Noah

backyard wrote:

--- Noah <[EMAIL PROTECTED]> wrote:

  

Okay I cant seem to figure out why sshd logins are
stalling.  I see that 
I am coming from an IP address that does not have

Reverse mapping.

So I added the lines below to
/usr/local/etc/ssh/sshd_config
and /etc/ssh is sym linked to /usr/local/etc/ssh

--- snip ---
lrwxr-xr-x  1 root  wheel18 Sep  4 23:01 ssh
-> /usr/local/etc/ssh

UseDNS no
VerifyReverseMapping no

 snip ---


cheers,

Noah




just a thought but if /etc/ssh is linked to
/usr/local/etc/ssh wouldn't that just cause troubles
from the ghetco? My understanding is /usr/local/etc is
for local specific configurations so that a site
specific configuration in /etc can be loaded and
appended by the stuff in /usr/local/etc. Wouldn't
symlinking one to the other force the same config
files to be loaded twice??? And if so wouldn't that
possibly confuse the daemon? Maybe I'm not entirely
clear on how all that works myself. but my
understanding is /etc is read first and then appended
by /usr/local/etc. Although I can see how this would
allow NFS to be used on diskless clients using generic
/etc while allowing system specific configurations to
be stored elsewhere and linked in as needed. I am just
under the impression that /usr/local/etc is not for
this purpose. of course I'm not the brightest tool in
the shed...
  




Well currently if I am coming from an IP address the has reverse mapping 
then things work fine there is no stalling whatsoever.  When I removed 
the sym link between /etc/ssh and /usr/local/etc/ssh things work fine 
now.  these is still stalling experienced when coming from an machine 
with a non-reverse mapped IP.


other clues?

cheers,

Noah









-brian
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sshd login stalling

2006-09-05 Thread backyard


--- Noah <[EMAIL PROTECTED]> wrote:

> Okay I cant seem to figure out why sshd logins are
> stalling.  I see that 
> I am coming from an IP address that does not have
> Reverse mapping.
> 
> So I added the lines below to
> /usr/local/etc/ssh/sshd_config
> and /etc/ssh is sym linked to /usr/local/etc/ssh
> 
> --- snip ---
> lrwxr-xr-x  1 root  wheel18 Sep  4 23:01 ssh
> -> /usr/local/etc/ssh
> 
> UseDNS no
> VerifyReverseMapping no
> 
>  snip ---
> 
> 
> cheers,
> 
> Noah


just a thought but if /etc/ssh is linked to
/usr/local/etc/ssh wouldn't that just cause troubles
from the ghetco? My understanding is /usr/local/etc is
for local specific configurations so that a site
specific configuration in /etc can be loaded and
appended by the stuff in /usr/local/etc. Wouldn't
symlinking one to the other force the same config
files to be loaded twice??? And if so wouldn't that
possibly confuse the daemon? Maybe I'm not entirely
clear on how all that works myself. but my
understanding is /etc is read first and then appended
by /usr/local/etc. Although I can see how this would
allow NFS to be used on diskless clients using generic
/etc while allowing system specific configurations to
be stored elsewhere and linked in as needed. I am just
under the impression that /usr/local/etc is not for
this purpose. of course I'm not the brightest tool in
the shed...


-brian
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sshd login stalling

2006-09-05 Thread Noah

Thomas T. Veldhouse wrote:

Noah wrote:
Okay I cant seem to figure out why sshd logins are stalling.  I see 
that I am coming from an IP address that does not have Reverse mapping.


So I added the lines below to /usr/local/etc/ssh/sshd_config
and /etc/ssh is sym linked to /usr/local/etc/ssh

What are the contents of your /etc/hosts file?  Is there a setting 
there for your local IP other than localhost 127.0.0.1?




yes there is.  the local IP is there.

cheers,

Noah




Tom Veldhouse



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sshd login stalling

2006-09-05 Thread Thomas T. Veldhouse

Noah wrote:
Okay I cant seem to figure out why sshd logins are stalling.  I see 
that I am coming from an IP address that does not have Reverse mapping.


So I added the lines below to /usr/local/etc/ssh/sshd_config
and /etc/ssh is sym linked to /usr/local/etc/ssh

What are the contents of your /etc/hosts file?  Is there a setting there 
for your local IP other than localhost 127.0.0.1?


Tom Veldhouse


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


sshd login stalling

2006-09-05 Thread Noah
Okay I cant seem to figure out why sshd logins are stalling.  I see that 
I am coming from an IP address that does not have Reverse mapping.


So I added the lines below to /usr/local/etc/ssh/sshd_config
and /etc/ssh is sym linked to /usr/local/etc/ssh

--- snip ---
lrwxr-xr-x  1 root  wheel18 Sep  4 23:01 ssh -> /usr/local/etc/ssh

UseDNS no
VerifyReverseMapping no

 snip ---


cheers,

Noah


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"