Slowness issue on openssh 4.4p1 login

"Pan, Kui" <[email protected]>
Newsgroups gmane.os.openbsd.www
Message-ID <A304D4C1E96C054F92E9DE2C682782F9048B1E1E@BMFGEXCMA03.adroot.bmogc.net>
Hello,

I'm not sure if it's a bug, but after I installed openssh 4.4p1 on
solaris 10, it takes much longer than before to login. Attached are
debug mode log. See the gap in between? 10 seconds happen there.

Any idea?



$ ssh -v -v -v hsksccweb1

OpenSSH_4.4p1, OpenSSL 0.9.8c 05 Sep 2006

debug1: Reading configuration data /etc/openssh/ssh_config

debug2: ssh_connect: needpriv 0

debug1: Connecting to hsksccweb1 [172.28.87.57] port 22.

debug1: Connection established.

debug1: identity file /export/home/kuipan/.ssh/identity type -1

debug1: identity file /export/home/kuipan/.ssh/id_rsa type -1

debug1: identity file /export/home/kuipan/.ssh/id_dsa type -1

debug1: Remote protocol version 2.0, remote software version OpenSSH_4.4

debug1: match: OpenSSH_4.4 pat OpenSSH*

debug1: Enabling compatibility mode for protocol 2.0

debug1: Local version string SSH-2.0-OpenSSH_4.4

debug2: fd 4 setting O_NONBLOCK

debug1: SSH2_MSG_KEXINIT sent

debug1: SSH2_MSG_KEXINIT received

debug2: kex_parse_kexinit:
diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,
diffie-hellman-group14-sha1,diffie-hellman-group1-sha1

debug2: kex_parse_kexinit: ssh-rsa,ssh-dss

debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfo
ur,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-c
tr,aes256-ctr

debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfo
ur,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-c
tr,aes256-ctr

debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-9
6,hmac-md5-96

debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-9
6,hmac-md5-96

debug2: kex_parse_kexinit: none,[email protected],zlib

debug2: kex_parse_kexinit: none,[email protected],zlib

debug2: kex_parse_kexinit:

debug2: kex_parse_kexinit:

debug2: kex_parse_kexinit: first_kex_follows 0

debug2: kex_parse_kexinit: reserved 0

debug2: kex_parse_kexinit:
diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,
diffie-hellman-group14-sha1,diffie-hellman-group1-sha1

debug2: kex_parse_kexinit: ssh-rsa,ssh-dss

debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfo
ur,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-c
tr,aes256-ctr

debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfo
ur,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-c
tr,aes256-ctr

debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-9
6,hmac-md5-96

debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-9
6,hmac-md5-96

debug2: kex_parse_kexinit: none,[email protected]

debug2: kex_parse_kexinit: none,[email protected]

debug2: kex_parse_kexinit:

debug2: kex_parse_kexinit:

debug2: kex_parse_kexinit: first_kex_follows 0

debug2: kex_parse_kexinit: reserved 0

debug2: mac_init: found hmac-md5

debug1: kex: server->client aes128-cbc hmac-md5 none

debug2: mac_init: found hmac-md5

debug1: kex: client->server aes128-cbc hmac-md5 none

debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent

debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP

debug2: dh_gen_key: priv key bits set: 141/256

debug2: bits set: 527/1024

debug1: SSH2_MSG_KEX_DH_GEX_INIT sent

debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY

debug3: check_host_in_hostfile: filename
/export/home/kuipan/.ssh/known_hosts

debug3: check_host_in_hostfile: match line 182

debug3: check_host_in_hostfile: filename
/export/home/kuipan/.ssh/known_hosts

debug3: check_host_in_hostfile: match line 182

debug1: Host 'hsksccweb1' is known and matches the RSA host key.

debug1: Found key in /export/home/kuipan/.ssh/known_hosts:182

debug2: bits set: 497/1024

debug1: ssh_rsa_verify: signature correct

debug2: kex_derive_keys

debug2: set_newkeys: mode 1

debug1: SSH2_MSG_NEWKEYS sent

debug1: expecting SSH2_MSG_NEWKEYS

debug2: set_newkeys: mode 0

debug1: SSH2_MSG_NEWKEYS received

debug1: SSH2_MSG_SERVICE_REQUEST sent

debug2: service_accept: ssh-userauth

debug1: SSH2_MSG_SERVICE_ACCEPT received

debug2: key: /export/home/kuipan/.ssh/identity (0)

debug2: key: /export/home/kuipan/.ssh/id_rsa (0)

debug2: key: /export/home/kuipan/.ssh/id_dsa (0)









debug1: Authentications that can continue:
publickey,password,keyboard-interactive

debug3: start over, passed a different list
publickey,password,keyboard-interactive

debug3: preferred publickey,keyboard-interactive,password

debug3: authmethod_lookup publickey

debug3: remaining preferred: keyboard-interactive,password

debug3: authmethod_is_enabled publickey

debug1: Next authentication method: publickey

debug1: Trying private key: /export/home/kuipan/.ssh/identity

debug3: no such identity: /export/home/kuipan/.ssh/identity

debug1: Trying private key: /export/home/kuipan/.ssh/id_rsa

debug3: no such identity: /export/home/kuipan/.ssh/id_rsa

debug1: Trying private key: /export/home/kuipan/.ssh/id_dsa

debug3: no such identity: /export/home/kuipan/.ssh/id_dsa

debug2: we did not send a packet, disable method

debug3: authmethod_lookup keyboard-interactive

debug3: remaining preferred: password

debug3: authmethod_is_enabled keyboard-interactive

debug1: Next authentication method: keyboard-interactive

debug2: userauth_kbdint

debug2: we sent a keyboard-interactive packet, wait for reply

debug1: Authentications that can continue:
publickey,password,keyboard-interactive

debug3: userauth_kbdint: disable: no info_req_seen

debug2: we did not send a packet, disable method

debug3: authmethod_lookup password

debug3: remaining preferred:

debug3: authmethod_is_enabled password

debug1: Next authentication method: password

kuipan@hsksccweb1's password:





Regards,

Kui
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.