Do you think it would speed things up to go ahead and implement ldap?<br><br><div class="gmail_quote">On Tue, Aug 14, 2012 at 7:35 AM, Wolf Halton <span dir="ltr"><<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I can see I have it querying the external domain-name of the network rather than localdomain. <br><br>wolf@lva-01:~$ host 192.168.10.26<br>
Host 26.10.168.192.in-addr.arpa. not found: 3(NXDOMAIN)<br>wolf@lva-01:~$ host NAGIOS-01<br>
<a href="http://NAGIOS-01.example.org" target="_blank">NAGIOS-01.example.org</a> has address 112.136.19.115 <br># Not real IP This is the machine name, It's the public IP of the main fqdn and catchall for improperly-named sub-domains, and not the private IP by which NAGIOS-01 communicates with the slowpoke<br>
<br>wolf@lva-01:~$ dig NAGIOS-01<br>Since this A record doesn't exist, the answers are useless. However when I dig the actual subdomain, <a href="http://nagios.example.org" target="_blank">nagios.example.org</a>, it gives the right public IP.<div class="HOEnZb">
<div class="h5"><br>
<br><br><br><div class="gmail_quote">On Mon, Aug 13, 2012 at 8:37 AM, Lightner, Jeff <span dir="ltr"><<a href="mailto:JLightner@water.com" target="_blank">JLightner@water.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<p></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">If adding it to /etc/hosts resolved the issue it makes it sound as if your issue is name resolution.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Is the slowpoke Linux?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">What is in /etc/nsswitch.conf on the slowpoke for the “hosts” line? (You may need to look at other lines for IPv6 if not Linux.)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">If hosts line has “files” before “dns” what is in /etc/resolv.conf? Does it try nis?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">What happens if you try “host <nagios master>” from the slowpoke? What if you try “dig <nagios master>”.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:ale-bounces@ale.org" target="_blank">ale-bounces@ale.org</a> [mailto:<a href="mailto:ale-bounces@ale.org" target="_blank">ale-bounces@ale.org</a>]
<b>On Behalf Of </b>Wolf Halton<br>
<b>Sent:</b> Sunday, August 12, 2012 7:15 PM<br>
<b>To:</b> Atlanta Linux Enthusiasts<br>
<b>Subject:</b> Re: [ale] more fun with ssh<u></u><u></u></span></p><div><div>
<p class="MsoNormal"><u></u> <u></u></p>
<p>thanks.<u></u><u></u></p>
<p><a href="http://evergreen-community-01.lyrasistechnology.org" target="_blank">http://evergreen-community-01.lyrasistechnology.org</a><br>
<a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><u></u><u></u></p>
<div>
<p class="MsoNormal">On Aug 12, 2012 5:49 PM, "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>> wrote:<u></u><u></u></p>
<p>You can force version 2 only in confug. Ssh_version 2 is setting I think.<u></u><u></u></p>
<div>
<p class="MsoNormal">On Aug 12, 2012 11:01 AM, "Wolf Halton" <<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Sun, Aug 12, 2012 at 10:37 AM, Wolf Halton <<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Sun, Aug 12, 2012 at 10:32 AM, Wolf Halton <<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Sun, Aug 12, 2012 at 10:19 AM, Jim Kinney <<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>> wrote:<u></u><u></u></p>
<p>It still tries to resolve the ip to a host name. If you're not using dns for that segment, put a name in etc/hosts.<u></u><u></u></p>
<div>
<div>
<div>
<p class="MsoNormal">On Aug 12, 2012 9:52 AM, "Wolf Halton" <<a href="mailto:wolf.halton@gmail.com" target="_blank">wolf.halton@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p>Why would one of the hosts in my network take a very long time (over 10 seconds) to negotiate a connection from another host on the same lan. Using IP address only, no DNS resolution involved.<u></u><u></u></p>
<p>This would only be an interesting oddity if it didn't time out nagios checks.<u></u><u></u></p>
<p>Wolf<u></u><u></u></p>
<p><a href="http://evergreen-community-01.lyrasistechnology.org" target="_blank">http://evergreen-community-01.lyrasistechnology.org</a><br>
<a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"></p>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div><div><div>
<p></p>
<p> </p>
<p> </p>
<p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7<br>
debug1: SSH2_MSG_KEXINIT sent<br>
debug1: SSH2_MSG_KEXINIT received<br>
debug1: kex: server->client aes128-ctr hmac-md5 none<br>
debug1: kex: client->server aes128-ctr hmac-md5 none<br>
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent<br>
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP<br>
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent<br>
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY<br>
debug1: Host '192.168.10.56' is known and matches the RSA host key.<br>
debug1: Found key in /home/nagios/.ssh/known_hosts:32<br>
debug1: ssh_rsa_verify: signature correct<br>
debug1: SSH2_MSG_NEWKEYS sent<br>
debug1: expecting SSH2_MSG_NEWKEYS<br>
debug1: SSH2_MSG_NEWKEYS received<br>
debug1: SSH2_MSG_SERVICE_REQUEST sent<br>
debug1: SSH2_MSG_SERVICE_ACCEPT received<br>
%% slowdown is right here %%<br>
debug1: Authentications that can continue: publickey,password<br>
debug1: Next authentication method: publickey<br>
debug1: Trying private key: /home/nagios/.ssh/identity<br>
debug1: Offering public key: /home/nagios/.ssh/id_rsa<br>
debug1: Server accepts key: pkalg ssh-rsa blen 277<br>
debug1: read PEM private key done: type RSA<br>
debug1: Authentication succeeded (publickey).<br>
debug1: channel 0: new [client-session]<br>
debug1: Requesting <a href="mailto:no-more-sessions@openssh.com" target="_blank">
no-more-sessions@openssh.com</a><br>
debug1: Entering interactive session.<br>
debug1: Sending environment.<br>
debug1: Sending env LANG = en_US.UTF-8<br>
<br clear="all">
Why would only this host have that slow-down and none of the others? <br>
<span style="color:#888888">-- <br>
This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">
http://sourcefreedom.com</a><br>
Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">
http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>
Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">
wolfhalton@apache.org</a></span><u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal">How would I get it to NOT check reverse DNS?<br>
<a href="http://ubuntuforums.org/showthread.php?t=1699197" target="_blank">http://ubuntuforums.org/showthread.php?t=1699197</a><br>
<br>
"Just add the parameter "UseDNS no" on /etc/ssh/sshd_config" to the remote host I am shelling into?
<br clear="all">
<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
-- <br>
This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">
http://sourcefreedom.com</a><br>
Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">
http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>
Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">
wolfhalton@apache.org</a><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
Well adding the nagios server to the /etc/hosts file of the slowpoke, worked for that server, and adding the "UseDNS no" parameter to the /etc/sshd_config file on the slowpoke made other local servers access it properly.<br>
Now my question is, "Why does the system have to convert to SSH type I and how do I get it to use type II?<br clear="all">
<br>
-- <br>
This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">
http://sourcefreedom.com</a><br>
Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">
http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>
Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">
wolfhalton@apache.org</a><br>
<br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><u></u><u></u></p>
</div>
</div>
<p></p>
<p><font face="Arial"><font color="fuchsia"><font style="FONT-FAMILY:Arial;FONT-SIZE:10pt" size="2"></font></font></font> </p>
<p> </p>
</div></div><p><font face="Arial"><font color="fuchsia"><font style="FONT-FAMILY:Arial;FONT-SIZE:10pt" size="2">Athena<font size="1">®</font>, Created for the Cause</font><font size="1">™
</font></font></font></p>
<p><font face="Arial">Making a Difference in the Fight Against Breast Cancer</font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial"></font> </p>
<p><font face="Arial"><font><b>How and Why I Should Support Bottled Water!<br>
</b>Do not relinquish your right to choose bottled water as a healthy alternative to beverages that contain sugar, calories, etc. Your support of bottled water will make a difference! Your signatures count! Go to
<a href="http://www.bottledwatermatters.org/luv-bottledwater-iframe/dswaters" target="_blank">http://www.bottledwatermatters.org/luv-bottledwater-iframe/dswaters</a> and sign a petition to support your right to always choose bottled water. Help fight federal and state issues,
such as bottle deposits (or taxes) and organizations that want to ban the sale of bottled water. Support community curbside recycling programs. Support bottled water as a healthy way to maintain proper hydration. Our goal is 50,000 signatures. Share this petition
with your friends and family today!</font></font></p>
<p><font face="Arial"></font> </p>
<p><span style="FONT-FAMILY:Arial;FONT-SIZE:10pt">---------------------------------<br>
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information
is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.<br>
----------------------------------</span><span style="FONT-FAMILY:'Courier New';FONT-SIZE:9pt"><u></u><u></u></span></p>
<p> </p>
<p></p>
<p></p>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><br><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>This Apt Has Super Cow Powers - <a href="http://sourcefreedom.com" target="_blank">http://sourcefreedom.com</a><br>Open-Source Software in Libraries - <a href="http://FOSS4Lib.org" target="_blank">http://FOSS4Lib.org</a><br>
Advancing Libraries Together - <a href="http://LYRASIS.org" target="_blank">http://LYRASIS.org</a><br>Apache Open Office Developer <a href="mailto:wolfhalton@apache.org" target="_blank">wolfhalton@apache.org</a><br><br>