[olug] slow password authentication

[Rob Townley]

On Tue, Aug 26, 2008 at 11:27 AM, Noel Leistad <noel at metc.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> <not really important, unless you have same problems>
>
> had been using mythdora 5.0, experienced lots of crashes of MBE, decided
> to upgrade to CentOS 5.2 and manual install of MythTV, still experience
> crashes.
>
> </not really important, unless you have same problems>
>
> SO, I'll ssh into the box using putty in hopes of restarting
> mythbackend. (works, but sound generally dead too, so "reboot")
>
> the "login as:" prompt comes up quickly, followed quickly by password
> prompt.
>
> The verification of the password is a 8-12 second wait....
> If I then su , verification is instant.
>
> This happened both the MythDora 5 AND the CentOS 5.2
>
> I'm pretty sure it has nothing to do w/ the MBE crashes, but it's
> curious, AND frustrating.
>
> Has anyone become well-versed in the order of things in the files of the
> /etc/pam.d directory?? I'm assuming this is the place to look??
>
> Other suggestions.....
>
>
> TIA
> - --
> #######################################################
> #  Noel Leistad                                       #
> #  noel at metc.net                                      #
> #######################################################
>
>
> Man is the measure of all things.
>                -- Protagoras
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iD8DBQFItC77OOK3iqPtSz8RAmE2AJ9N3XSzbBIZMz5AlPdi1J/JfNmngwCcD8IH
> fQmZKMtXqLpdxwyP9sf0b1E=
> =ajrW
> -----END PGP SIGNATURE-----
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>


cat /var/log/secure
if samba / winbind is running, /var/log/samba/ log files.


Were you just trying this in the last 5 days or so?  Redhat / CentOS
released new versions of OpenSSH because an unreleased version of ssh was
hacked.  There is a script downloadable from redhat that tells you if it
effected you, but then again that doesn't work for CentOS and it seems they
are saying no one was affected, but here is a script to find out if you
were.   ??.