[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Proposal: remove krb5-appl (rlogin, rsh, telnet, ftp with krb5 support)

Joshuah Hurst <joshhurst@gmail.com> writes:

> Only in cases when Kerberos5 is not available.  One major advantage over
> ssh is that krb5-rsh has much lower latency and overhead (in terms of
> used cpu time) when executing a plain /bin/true on a remote host, doing
> that in a loop over 1000 logins can take hours with ssh but takes
> minutes with krb-rsh.

I'm dubious about this contention about ssh.

windlord:~> time sh -c 'for i in $(seq 1 1000) ; do ssh debuild-i386 true ; done'
10.764u 3.332s 1:52.78 12.4%    0+0k 896+8io 0pf+0w

That's with Kerberos authentication.

I think you have something misconfigured with ssh or with your DNS
(Kerberos is very sensitive to DNS issues).

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: