[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#314645: moreinfo, unreproducible, downgrade



On Sat, Dec 31, 2005 at 02:18:00PM +0000, Colin Watson wrote:
> On Sun, Jul 03, 2005 at 02:24:34PM +0100, Colin Watson wrote:
> > On Wed, Jun 29, 2005 at 03:10:35PM -0400, Justin Pryzby wrote:
> > > I suggest tagging this moreinfo,unreproducible, and downgrading when
> > > and if that is necessary for new packages to move to testing (which
> > > should be deliberately prevented until #314289 is fixed).
> > 
> > Please leave this bug in its current state. I'm sorry it's taken me so
> > long to get round to investigating it, but from experience I have reason
> > to suspect that it may well be valid and it certainly bears
> > non-statistical investigation. Greg, I need to see your
> > /etc/ssh/sshd_config in order to check this out.
> 
> OK, well, I can't reproduce this myself, so given that I don't seem to
> be getting lots of mail screaming about this and that Greg hasn't
> followed up yet with configuration information, I'm following Justin's
> advice after all for now. Greg, I'm still prepared to investigate given
> information on how to reproduce your setup.

Hmm, I have an apology to make, since Greg did in fact follow up in
private mail with a copy of his sshd_config (which, respecting his
confidentiality, I won't forward to the bug, although I doubt that
anything in that file is truly private).

However, I just tried this sshd_config with both ssh 1:3.8.1p1-8.sarge.4
on i386 and openssh-server 1:4.2p1-6 (unreleased, but no relevant
changes) on powerpc, and couldn't reproduce the problem. On 3.8.1p1,
both valid and invalid usernames caused a similar delay at the
"Password:" (keyboard-interactive authentication) prompt and no delay at
the "user@host's password:" (password authentication) prompt; on 4.2p1,
both valid and invalid usernames caused similar delays at both prompts.

So I'm no further along, really. Perhaps differing client configuration
is responsible somehow?

Cheers,

-- 
Colin Watson                                       [cjwatson@debian.org]




Reply to: