openssh bugs - Jul 2015 - [Bug 2433] New: please add debug output when resolving

https://bugzilla.mindrot.org/show_bug.cgi?id=2433

            Bug ID: 2433
           Summary: please add debug output when resolving
           Product: Portable OpenSSH
           Version: 6.7p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: vincent-openssh at vinc17.net

There's missing debug output when using -vvv, which makes finding the
cause of a problem harder, like below.

I often get a 5-second or 10-second delay *before* the connection. For
instance:

0.000008 OpenSSH_6.7p1 Debian-6, OpenSSL 1.0.2d 9 Jul 2015
0.000071 debug1: Reading configuration data /home/vinc17/.ssh/config
0.000083 debug1: /home/vinc17/.ssh/config line 88: Applying options for
ioooi
0.000092 debug1: /home/vinc17/.ssh/config line 374: Applying options
for *
0.000099 debug1: Reading configuration data /etc/ssh/ssh_config
0.000107 debug1: /etc/ssh/ssh_config line 19: Applying options for *
0.000114 debug1: Hostname has changed; re-reading configuration
0.000121 debug1: Reading configuration data /home/vinc17/.ssh/config
0.000128 debug2: add_identity_file: ignoring duplicate key
~/.ssh/id_rsa-internal
0.000135 debug2: add_identity_file: ignoring duplicate key
~/.ssh/id_rsa
0.000143 debug1: /home/vinc17/.ssh/config line 374: Applying options
for *
0.000150 debug1: Reading configuration data /etc/ssh/ssh_config
0.000157 debug1: /etc/ssh/ssh_config line 19: Applying options for *
0.000164 debug1: Control socket "/tmp/ssh-ioooi.vinc17.net-22-vinc17"
does not exist
5.078375 debug2: ssh_connect: needpriv 0
5.078423 debug1: Connecting to ioooi.vinc17.net [92.243.22.117] port
22.
5.155833 debug1: Connection established.
[...]

even if a few seconds before, there was no such problem. When I run
"ping ioooi.vinc17.net" during this test, there isn't any problem
shown
in the ping output (i.e. I get an answer every second).

So, I wasn't wondering what happened between "Control socket..."
and
"ssh_connect: needpriv 0". This was a mystery... until I tried with
strace, where I could see things related to resolving, with a timeout
in the connection to the DNS server just before the 5-second delay.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2433

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org
         Resolution|---                         |FIXED
             Blocks|                            |2451

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Good point, openssh-7.2 will do:

debug2: resolving "foo.example.com" port 22


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=2451
[Bug 2451] Bugs intended to be fixed in 7.2
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2433

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Close all resolved bugs after 7.3p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.