Help - Search - Members - Calendar
Full Version: RHES 3.0 - SSH login - delay?
The Planet Forums > Control Panels > Other
tomkitten
Hello,

I've remarked that there is a ca. 2 seconds delay between sending the hostname and being allowed to enter the username. As I'm doing CVS over SSH, this prolonges the operation considerably. Is there a possibility to switch this off (or set it to 0.5 secs). I've looked into /etc/ssh/sshd_config , but I did not find any clue ...

Thanks
chirpy
You're probably best asking openSSH.

I've a feeling this might have been introduced due to various timing attacks vulnerability whereby an attacker could try various usernames and determine which ones are valid by the time it takes the server daemon to respond. Although, this doesn't exactly explain the delay between hostname and username.

Can you use key authentication over SSH for CVS, since this might remove that hurdle?
tomkitten
I did some more research, and discovered that OpenSSH doesn't provide such an option. So,
1) it takes so long for SSH to do something between username/pwd
2) "Linux-PAM" (Pluggable Authentication Modules for Linux) has his hands in it, too, so maybe PAM produces this delay.
I will look into this again as it is really annoying, but PAM seams to be a beast..
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.