Delays looking up realm of host

Bug #1262849 reported by Sam Hartman
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Project Moonshot
Won't Fix
Undecided
Unassigned

Bug Description

In at least some cases we're seeing 15 second delays on ssh. According to verbose output the Kerberos gss-api mechanism is spending 5 seconds failing to find the realm of a numeric host name.
This is probably not a mech_eap bug but is probably either a Kerberos or GSS bug that has significant consequences for mech_eap.
This doesn't happen all the time. It's desirable to trace what's going on and fix.

Revision history for this message
Kevin Wasserman (krwasserman) wrote :

Workaround:
in etc/krb5.conf [libdefaults] add
rdns = no

Revision history for this message
Margaret Cullen (mrw42) wrote :

The above workaround is the only fix we have for this. The underlying problem is in MIT Kerberos.

Changed in moonshot:
status: New → Won't Fix
Revision history for this message
Stefan Paetow (stefan-paetow) wrote :

Documented in the Troubleshooting section

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.