<p>You can force version 2 only in confug. Ssh_version 2 is setting I think.</p>
<div class="gmail_quote">On Aug 12, 2012 11:01 AM, "Wolf Halton" <<a href="mailto:wolf.halton@gmail.com">wolf.halton@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br><br><div class="gmail_quote">On Sun, Aug 12, 2012 at 10:37 AM, Wolf Halton <span dir="ltr"><<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><br><br><div class="gmail_quote">On Sun, Aug 12, 2012 at 10:32 AM, Wolf Halton <span dir="ltr"><<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><br><br><div class="gmail_quote">On Sun, Aug 12, 2012 at 10:19 AM, Jim Kinney <span dir="ltr"><<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p>It still tries to resolve the ip to a host name. If you're not using dns for that segment, put a name in etc/hosts.</p>
<div class="gmail_quote"><div><div>On Aug 12, 2012 9:52 AM, "Wolf Halton" <<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>> wrote:<br type="attribution"></div></div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<p>Why would one of the hosts in my network take a very long time (over 10 seconds) to negotiate a connection from another host on the same lan. Using IP address only, no DNS resolution involved.</p>
<p>This would only be an interesting oddity if it didn't time out nagios checks.</p>
<p>Wolf</p>
<p><a href="http://evergreen-community-01.lyrasistechnology.org" target="_blank">http://evergreen-community-01.lyrasistechnology.org</a><br>
<a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a></p>
<br></div></div><div>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></div></blockquote></div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br></div></div>debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7<br>debug1: SSH2_MSG_KEXINIT sent<br>debug1: SSH2_MSG_KEXINIT received<br>debug1: kex: server->client aes128-ctr hmac-md5 none<br>
debug1: kex: client->server aes128-ctr hmac-md5 none<br>debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent<br>debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP<br>debug1: SSH2_MSG_KEX_DH_GEX_INIT sent<br>debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY<br>
debug1: Host '192.168.10.56' is known and matches the RSA host key.<br>debug1: Found key in /home/nagios/.ssh/known_hosts:32<br>debug1: ssh_rsa_verify: signature correct<br>debug1: SSH2_MSG_NEWKEYS sent<br>debug1: expecting SSH2_MSG_NEWKEYS<br>
debug1: SSH2_MSG_NEWKEYS received<br>debug1: SSH2_MSG_SERVICE_REQUEST sent<br>debug1: SSH2_MSG_SERVICE_ACCEPT received<br>%% slowdown is right here %%<br>debug1: Authentications that can continue: publickey,password<br>debug1: Next authentication method: publickey<br>
debug1: Trying private key: /home/nagios/.ssh/identity<br>debug1: Offering public key: /home/nagios/.ssh/id_rsa<br>debug1: Server accepts key: pkalg ssh-rsa blen 277<br>debug1: read PEM private key done: type RSA<br>debug1: Authentication succeeded (publickey).<br>
debug1: channel 0: new [client-session]<br>debug1: Requesting <a href="mailto:no-more-sessions@openssh.com" target="_blank">no-more-sessions@openssh.com</a><br>debug1: Entering interactive session.<br>debug1: Sending environment.<br>
debug1: Sending env LANG = en_US.UTF-8<br>
<br clear="all">Why would only this host have that slow-down and none of the others? <br><span><font color="#888888">-- <br>This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>
Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><br><br>
</font></span></blockquote></div><br></div></div>How would I get it to NOT check reverse DNS?<br><a href="http://ubuntuforums.org/showthread.php?t=1699197" target="_blank">http://ubuntuforums.org/showthread.php?t=1699197</a><br>
<br>"Just add the parameter "UseDNS no" on /etc/ssh/sshd_config" to the remote host I am shelling into? <br clear="all"><div><div>
<br>-- <br>This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><br><br>
</div></div></blockquote></div><br>Well adding the nagios server to the /etc/hosts file of the slowpoke, worked for that server, and adding the "UseDNS no" parameter to the /etc/sshd_config file on the slowpoke made other local servers access it properly.<br>
Now my question is, "Why does the system have to convert to SSH type I and how do I get it to use type II?<br clear="all"><br>-- <br>This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>
Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">http://FOSS4Lib.org</a><br>Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><br>
<br>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div>