Re: PUzzling sshd behaviour

2003-09-08 Thread Andreas Klemm
On Mon, Sep 08, 2003 at 05:02:02PM -0500, Jeremy Messenger wrote: > I use tinydns and dnscache to do the local DNS, so I don't have to touch > the /etc/hosts anymore. The /etc/hosts is just pain in my ass. It solved > all of my SSH and other reverse lookup problems. Current, I have the split > h

Re: PUzzling sshd behaviour

2003-09-08 Thread Jeremy Messenger
On Mon, 8 Sep 2003 23:13:06 +0200, Andreas Klemm <[EMAIL PROTECTED]> wrote: On Mon, Sep 08, 2003 at 03:59:51PM -0500, Jeremy Messenger wrote: My solution is to install and setup dnscache to do the local DNS cache. DNS cache sounds like it caches DNS records after a successfull DNS query, right ?

Re: PUzzling sshd behaviour

2003-09-08 Thread ari
[EMAIL PROTECTED] said this stuff: > On Sun, Sep 07, 2003 at 02:55:10AM +0100, Bruce M Simpson wrote: [...] > > > >But what about: > > > > VerifyReverseMapping > > > > Specifies whether sshd should try to verify the remote host > > > > name > > > > and chec

Re: PUzzling sshd behaviour

2003-09-08 Thread Andreas Klemm
On Mon, Sep 08, 2003 at 03:59:51PM -0500, Jeremy Messenger wrote: > My solution is to install and setup dnscache to do the local DNS cache. DNS cache sounds like it caches DNS records after a successfull DNS query, right ? The problem at my clients project was, that the DNS server a) wasn't reach

Re: PUzzling sshd behaviour

2003-09-08 Thread Jeremy Messenger
On Mon, 8 Sep 2003 22:27:27 +0200, Andreas Klemm <[EMAIL PROTECTED]> wrote: On Sun, Sep 07, 2003 at 02:55:10AM +0100, Bruce M Simpson wrote: On Sat, Sep 06, 2003 at 10:54:35PM -0300, Daniel C. Sobral wrote: > Bruce M Simpson wrote: > >On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote:

Re: PUzzling sshd behaviour

2003-09-08 Thread Andreas Klemm
On Sun, Sep 07, 2003 at 02:55:10AM +0100, Bruce M Simpson wrote: > On Sat, Sep 06, 2003 at 10:54:35PM -0300, Daniel C. Sobral wrote: > > Bruce M Simpson wrote: > > >On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote: > > >>The fact that sshd requires reverse IP resolution is well-known >

Re: PUzzling sshd behaviour

2003-09-06 Thread Bruce M Simpson
On Sat, Sep 06, 2003 at 10:54:35PM -0300, Daniel C. Sobral wrote: > Bruce M Simpson wrote: > >On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote: > >>The fact that sshd requires reverse IP resolution is well-known > >>behaviour. It's probably the most common FAQ about sshd ("Why is my >

Re: PUzzling sshd behaviour

2003-09-06 Thread Daniel C. Sobral
Bruce M Simpson wrote: On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote: Anyone else see this type of thing before? I did some research on the lists but all I ever saw was a problem with reading resolv.conf. That's not the case here, because it's definitely picking up the nameserver

Re: PUzzling sshd behaviour

2003-09-06 Thread Bruce M Simpson
On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote: > > Anyone else see this type of thing before? I did some research on the > > lists but all I ever saw was a problem with reading resolv.conf. That's > > not the case here, because it's definitely picking up the nameserver > > from t

Re: PUzzling sshd behaviour

2003-09-05 Thread Ted Faber
On Fri, Sep 05, 2003 at 07:43:53PM -0400, Richard Coleman wrote: > I figured that nsswitch.conf would deprecate host.conf. Is this not true? On 5.x I think you're right. On 4.x it still is host.conf. (Or there is no nsswicth.conf installed by default and no manual pages - I haven't dug hard.)

Re: PUzzling sshd behaviour

2003-09-05 Thread Richard Coleman
Ted Faber wrote: I'll bet that the problem is with the format of your /etc/hosts . Check out the man page (man 5 hosts) and plink with it until it does what you want. Sometimes the lookups through /etc/hosts are counterintuitive - for example I've had problems related to the order of names and a

Re: PUzzling sshd behaviour

2003-09-05 Thread Dwayne MacKinnon
Simon L. Nielsen wrote: Do you use Privilege Separation? That can give interesting results with DNS due to chroot into /var/empty... see the mailing lists archives. Argh. This frustrates me. I did some searching on various mailing lists before, and when they talked about switching into /var/emp

Re: PUzzling sshd behaviour

2003-09-05 Thread Simon L. Nielsen
On 2003.09.05 12:29:10 -0400, Dwayne MacKinnon wrote: > Ted Faber wrote: > >On Fri, Sep 05, 2003 at 12:04:04PM -0400, Dwayne MacKinnon wrote: > > > >>That much I know. I was just wondering why the daemon is trying DNS > >>lookup when the IP in question is listed in /etc/hosts. I thought > >>listi

Re: PUzzling sshd behaviour

2003-09-05 Thread Ted Faber
On Fri, Sep 05, 2003 at 12:29:10PM -0400, Dwayne MacKinnon wrote: > Ted Faber wrote: > >On Fri, Sep 05, 2003 at 12:04:04PM -0400, Dwayne MacKinnon wrote: > >>That much I know. I was just wondering why the daemon is trying DNS > >>lookup when the IP in question is listed in /etc/hosts. > > > >If y

Re: PUzzling sshd behaviour

2003-09-05 Thread Dwayne MacKinnon
Ted Faber wrote: On Fri, Sep 05, 2003 at 12:04:04PM -0400, Dwayne MacKinnon wrote: That much I know. I was just wondering why the daemon is trying DNS lookup when the IP in question is listed in /etc/hosts. I thought listings in /etc/hosts would supercede the need for a DNS lookup. Of course, I

Re: PUzzling sshd behaviour

2003-09-05 Thread Ted Faber
On Fri, Sep 05, 2003 at 12:04:04PM -0400, Dwayne MacKinnon wrote: > That much I know. I was just wondering why the daemon is trying DNS > lookup when the IP in question is listed in /etc/hosts. I thought > listings in /etc/hosts would supercede the need for a DNS lookup. Of > course, I could be

Re: PUzzling sshd behaviour

2003-09-05 Thread Dwayne MacKinnon
Kris Kennaway wrote: On Fri, Sep 05, 2003 at 10:32:52AM -0400, Dwayne MacKinnon wrote: Anyone else see this type of thing before? I did some research on the lists but all I ever saw was a problem with reading resolv.conf. That's not the case here, because it's definitely picking up the nameserv

Re: PUzzling sshd behaviour

2003-09-05 Thread Kris Kennaway
On Fri, Sep 05, 2003 at 10:32:52AM -0400, Dwayne MacKinnon wrote: > Anyone else see this type of thing before? I did some research on the > lists but all I ever saw was a problem with reading resolv.conf. That's > not the case here, because it's definitely picking up the nameserver > from that

PUzzling sshd behaviour

2003-09-05 Thread Dwayne MacKinnon
Hi, I recently took one of our machines off the main network and set up a crossover cable between it and my personal box. I was looking to scp some large files over and I didn't want to swamp the network. (I use scp from force of habit, even though ftp would probably be quicker in this case.)