openssh bugs - May 2007 - [Bug 1318] New: There is no way to really cancel dns queries from the client

http://bugzilla.mindrot.org/show_bug.cgi?id=1318

           Summary: There is no way to really cancel dns queries from the
                    client
           Product: Portable OpenSSH
           Version: 4.3p2
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ssh
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: eyal.lotem at gmail.com


The option "CheckHostIP no" cancels ssh's lookup, but the ssh
clinet
still calls gss_import_name with the parameter
GSS_C_NT_HOSTBASED_SERVICE. This call creates a name lookup internally
(via gss's call to krb5_sname_to_principal).

This causes "ssh" to always attempt to backresolve IP addresses. It
only gives up after about 10 seconds. This means that all ssh-based
traffic (ssh, sftp, etc) requires a 10 second initiation time (!)
before it can work, unless adding the private network IP addresses to
/etc/hosts.

I think "ssh" is the last tool I have left that still insists on
backresolving my private net IP's, and I would rather not pollute
/etc/hosts with private addresses.


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

http://bugzilla.mindrot.org/show_bug.cgi?id=1318


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME
                 CC|                            |djm at mindrot.org




--- Comment #1 from Damien Miller <djm at mindrot.org>  2007-06-13
10:29:05 ---
Setting GSSAPIAuthentication=no in ssh_config will disable these
lookups.


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1318


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added                       
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED                      




--- Comment #2 from Damien Miller <djm at mindrot.org>  2008-04-04
09:59:46 ---
Close resolved bugs after release.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.