ssh hang issue

[Dennis Ruzeski]

That was what I initially thought, but DNS works fine both ways and they
have hosts file entries.  Also, tcpdumps during the connection  don't
show any dns traffic.

--Dennis



-----Original Message-----
From: owner-nflug at nflug.org [mailto:owner-nflug at nflug.org] On Behalf Of
Darin Perusich
Sent: Wednesday, May 11, 2005 1:05 PM
To: nflug at nflug.org
Subject: Re: ssh hang issue
Importance: Low

the hang is likely a dns issue on the far end, host j23 from the debug 
output. ssh will try and to lookup the incoming hosts hostname, once it 
times out it uses the ip address.

check /etc/resolv.conf on j23.

Dennis Ruzeski wrote:
> I have ssh set up with authorized keys (no password required.)
> 
>  
> 
> Basically, I replaced a server with another- Added it to the
authorized 
> keys list and set it up just like the old server but it hangs (as
shown 
> here by ssh -v -v )
> 
>  
> 
> debug2: bits set: 517/1024
> 
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
> 
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> 
> debug2: key_type_from_name: unknown key type '1024'
> 
> debug2: key_type_from_name: unknown key type '1024'
> 
> debug1: Host 'j23' is known and matches the RSA host key.
> 
> debug1: Found key in /root/.ssh/known_hosts:342
> 
> debug2: bits set: 494/1024
> 
> debug1: ssh_rsa_verify: signature correct
> 
> debug2: kex_derive_keys
> 
> debug2: set_newkeys: mode 1
> 
> debug1: SSH2_MSG_NEWKEYS sent
> 
> debug1: expecting SSH2_MSG_NEWKEYS
> 
> debug2: set_newkeys: mode 0
> 
> debug1: SSH2_MSG_NEWKEYS received
> 
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> 
> debug2: service_accept: ssh-userauth
> 
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> 
> debug2: key: /root/.ssh/id_rsa ((nil))
> 
> debug2: key: /root/.ssh/id_dsa (0x808d9b0)
> 
> debug1: Authentications that can continue: 
> publickey,password,keyboard-interactive
> 
> debug1: Next authentication method: publickey
> 
> debug1: Trying private key: /root/.ssh/id_rsa
> 
> debug1: Offering public key: /root/.ssh/id_dsa
> 
> debug2: we sent a publickey packet, wait for reply
> 
>  
> 
>  
> 
> It'll sit like that for a good 3-4 minutes and then complete ok.
> 
>  
> 
> Anybody see this before?
> 
>  
> 
> TIA,
> 
> Dennis
> 
>  
> 
>  
> 

-- 
Darin Perusich
Unix Systems Administrator
Cognigen Corp.
darinper at cognigencorp.com