tomkitten
Feb 24 2004, 04:53 AM
Hello,
I've remarked that there is a ca. 2 seconds delay between sending the hostname and being allowed to enter the username. As I'm doing CVS over SSH, this prolonges the operation considerably. Is there a possibility to switch this off (or set it to 0.5 secs). I've looked into /etc/ssh/sshd_config , but I did not find any clue ...
Thanks
chirpy
Feb 24 2004, 09:53 AM
You're probably best asking openSSH.
I've a feeling this might have been introduced due to various timing attacks vulnerability whereby an attacker could try various usernames and determine which ones are valid by the time it takes the server daemon to respond. Although, this doesn't exactly explain the delay between hostname and username.
Can you use key authentication over SSH for CVS, since this might remove that hurdle?
tomkitten
Feb 24 2004, 05:20 PM
I did some more research, and discovered that OpenSSH doesn't provide such an option. So,
1) it takes so long for SSH to do something between username/pwd
2) "Linux-PAM" (Pluggable Authentication Modules for Linux) has his hands in it, too, so maybe PAM produces this delay.
I will look into this again as it is really annoying, but PAM seams to be a beast..
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.