Re: SSH problem

The server (sshd) will attempt to use the result of a reverse lookup in
order to verify if the client hostname matches what is passed in the public
host key.

Access via IP or hostname on the client side is irrelevant.

On Tue, Jun 8, 2010 at 4:14 PM, Naufal Jamal <naufalccie_at_yahoo.in> wrote:

> Adding to that i am facing the same problem when i try to access these
> servevrs both from ip address and their hostnames so i dont think that this
> could be a problem with reverse dns lookup
>
> --- On Mon, 7/6/10, itguy.pro_at_gmail.com <itguy.pro_at_gmail.com> wrote:
>
>
> From: itguy.pro_at_gmail.com <itguy.pro_at_gmail.com>
> Subject: Re: SSH problem
> To: "Steve Shaw" <shaw38_at_gmail.com>, "Adrian Brayton" <abrayton_at_gmail.com>
> Cc: "Naufal Jamal" <naufalccie_at_yahoo.in>, "ccielab_at_groupstudy.com"
> <ccielab_at_groupstudy.com>
> Date: Monday, 7 June, 2010, 4:35 AM
>
>
> Is this just ssh or other services behaving in similar fashion?
> Sent via BlackBerry from T-Mobile
>
>
> From: Steve Shaw <shaw38_at_gmail.com>
> Date: Sun, 6 Jun 2010 20:16:05 -0400
> To: Adrian Brayton<abrayton_at_gmail.com>
> Cc: Naufal Jamal<naufalccie_at_yahoo.in>;
> itguy.pro_at_gmail.com<itguy.pro_at_gmail.com>;
> ccielab_at_groupstudy.com<ccielab_at_groupstudy.com>
> Subject: Re: SSH problem
>
> Make sure reverse DNS lookups are functioning correctly or disable "UseDNS"
> under sshd. Usual symptoms are cli response times rather than flat out time
> outs but worth a look.
>
>
> On Sun, Jun 6, 2010 at 7:10 PM, Adrian Brayton <abrayton_at_gmail.com> wrote:
>
> So those 16 servers could SSH in fine, then all of a sudden all 16 can't
> SSH
> in on the first try? You had mentioned APPs team, did they make a change on
> there end and not tell you?
>
> Can you SSH in from other devices and get in on the first try? Maybe the
> ASA
> has some incomplete SSH sessions that are clogging things up? What does the
> debug say when a connection is successful / fails?
>
> Sent from my iPad
>
>
>
>
> On Jun 6, 2010, at 6:05 PM, Naufal Jamal <naufalccie_at_yahoo.in> wrote:
>
> > Well its 16 servers that are facing this problem. I dont think Ip could
> be
> > duplicated on all of them..any other possibilities?
> > --- On Sun, 6/6/10, itguy.pro_at_gmail.com <itguy.pro_at_gmail.com> wrote:
> >
> >
> > From: itguy.pro_at_gmail.com <itguy.pro_at_gmail.com>
> > Subject: Re: SSH problem
> > To: "Naufal Jamal" <naufalccie_at_yahoo.in>, ccielab_at_groupstudy.com
> > Date: Sunday, 6 June, 2010, 8:04 PM
> >
> >
> > Duplicate ip?
> > Sent via BlackBerry from T-Mobile
> >
> > -----Original Message-----
> > From: Naufal Jamal <naufalccie_at_yahoo.in>
> > Date: Mon, 7 Jun 2010 01:24:42
> > To: <ccielab_at_groupstudy.com>
> > Subject: SSH problem
> >
> > Hi Folks,
> >
> > I am facing a strange problem in my network related to SSH. when my apps
> team
> > try to do ssh on their servers the ssh connection times out for the first
> > time
> > and after 2 - 3 times of re-try the connection works fine. what could be
> the
> > issue? any idea? dnt think it is a latency issue cos other traffic is
> working
> > fine. moreover i dont see any failed sessions on my ASA.
> >
> > please guide.
> > Naufal
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >_______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >_______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jun 08 2010 - 16:30:12 ART