Bug#409360: openssh-client: Disabling GSSAPIAuthentication option by default
On Fri, Mar 30, 2007 at 12:32:48PM -0700, Russ Allbery wrote:
> Colin Watson <cjwatson@debian.org> writes:
> > I would like to avoid the extra reverse DNS lookup if possible, though.
> > I looked into the source and couldn't entirely see what was going on, as
> > a chunk of it was buried in the bowels of krb5. Russ, do you have any
> > ideas here?
>
> Do we know which lookup in particular is hanging? I had originally
> thought that it was the lookups for the KDCs, but it sounds like that may
> not be the case. That's good news -- there isn't much that can be done
> about the KDC lookups without some longer-term upstream projects, but if
> it's something else, it may be easier to fix.
It's the one from gss_import_name (called from ssh_gss_import_name), I
believe.
--
Colin Watson [cjwatson@debian.org]
Reply to: