Welcome to FreeBSDFreaks.net!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Problems with FreeBSD authentication

 
   FreeBSD Hosting (Home) -> FreeBSD Handbook RSS
Next:  make.conf file - PLEASE HELP  
Author Message
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 1) Posted: Tue Sep 21, 2004 3:06 pm
Post subject: Problems with FreeBSD authentication
Archived from groups: comp>unix>bsd>freebsd>misc (more info?)

Hello all,

I am relatively new to FreeBSD, with little prior Unix experience (have
YEARS of Microsoft server/network exp).

I installed FreeBSD 5.1-RELEASE (bought the FreeBSD Mail CD) on a clone
box (Abit IS7 motherboard, 2.4Ghz P4, 512M ram, 80GB sata drive, Intel
Pro 10/100 nic, no usb, no serial/parallel), installed qmail, vpopmail,
qmailadmin, etc (all latest versions) to use this box as an email server
for SMTP/POP3 clients. I use PuTTY 0.55 and SSH to admin the box. The
kernel is modified to include IPFW support.

The entire installation went well, no errors, hiccups, etc. (I went
through the entire installation 15-20 times before the final
installation, to make sure I was familiar with the process)

I immediately noticed that connecting to the POP server with email
client software is very quick most times, but slow, slower, or EXTREMELY
slow at others, with delays reaching 1-2 minutes at times. The
connection has timed-out once or twice (the client software timed-out,
actually, waiting for the connection)

Telnetting to port 110 on the server revealed that the welcome message
from the server would appear after a variable delay time. After entering
the username, it sometimes takes a minute or more to get the prompt for
the password. After entering the password, then the process of data
transfer from server to client is very quick, with no errors.

I am experiencing the same delay characteristics when connecting to
SMTP, and when using PuTTY. Once I get logged on with PuTTY, I am able
to 'su root', do anything I need to on the server, without any
noticeable delay in response (I'm not saying there is no delay, only
that I do not notice any). I use WinSCP3 v3.6.8 to transfer files
to/from the server, and have noticed that after I get through the
(delayed) login process, the file transfers occur very quickly, always,
without errors.

Logging in at the server console always works perfectly.

'netstat -an' shows that, during those periods where I am telnetting to
port 110, and waiting through one of these delays for just the welcome
message, an established connection already exists between my workstation
and the server. Under the 'Active Unix domain sockets' section, 'x'
number of streams exist, and when the server does finally respond,
additional streams have been created (as I write this, it occurs to me
that I don't know how many additional.. maybe two or three?)

Because of the nature of the symptoms, I think this is an authentication
issue, not related to the installation of qmail, etc.

To eliminate all hardware/configuration/compatibility/application-
software concerns, I installed the OS (only, GENERIC kernel) on another
box, a Dell PowerEdge server with scsi drives, connected on my local
lan... same result. Also installed (OS only, GENERIC kernel) on another
workstation, with ata ide drives... same result (meaning same login
delays with PuTTY).

Using ftp, I installed (from www.freebsd.org) versions 4.10 and 5.2.1 at
different times... same result (using the PuTTY login as a test).

If this were Windows, I'd know just where to go and start looking for
clues. Being new to Unix, I'm almost certainly not looking in all the
right places, although I have gone through everything I find in var/log.
I've looked for (and looked at) any '.log'-type files I can find on the
system. I've read through 'The FreeBSD Handbook', 'Absolute BSD',
Googled my brains out, and looked at man pages, but haven't been able to
find the right document to help me, although I certainly read almost
everything Google returned that even looked close. I applied some
'sysctl' changes (suggested on Google result pages) in /etc/sysctl.conf,
but to no avail.

Having a delay instead of an outright 'timeout' makes it even harder to
troubleshoot, at least for me.

I feel pretty stupid right now (I know I'm not...), but I realize this
is only because I'm not sure of WHAT I am looking for, or exactly where
to look ('newbie' syndrome). I have tried to do my homework before this
post, but have exhausted my (limited knowledge) resources.

I will greatly appreciate it if anyone can point me in the right
direction, or ask me ANY question you like that might trigger my
understanding. I am obviously not lazy, and will hunt down anything I
need to supply/do/find/research, etc.

Thank you in advance for your time and help.

Les

 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 2) Posted: Tue Sep 21, 2004 3:23 pm
Post subject: Re: Problems with FreeBSD authentication - Follow-up [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Sorry for the immediate follow-up, but I left out some info.

All installations are Standard, with developer options selected. All
hard drives are clean, no prior data, no other OS partitions.

Thanks,

Les


In article ,
les DeleteThis @larsoncomputerservices.com says...
> Hello all,
>
> I am relatively new to FreeBSD, with little prior Unix experience (have
> YEARS of Microsoft server/network exp).
>
> I installed FreeBSD 5.1-RELEASE (bought the FreeBSD Mail CD) on a clone
> box (Abit IS7 motherboard, 2.4Ghz P4, 512M ram, 80GB sata drive, Intel
> Pro 10/100 nic, no usb, no serial/parallel), installed qmail, vpopmail,
> qmailadmin, etc (all latest versions) to use this box as an email server
> for SMTP/POP3 clients. I use PuTTY 0.55 and SSH to admin the box. The
> kernel is modified to include IPFW support.
>
> The entire installation went well, no errors, hiccups, etc. (I went
> through the entire installation 15-20 times before the final
> installation, to make sure I was familiar with the process)
>
> I immediately noticed that connecting to the POP server with email
> client software is very quick most times, but slow, slower, or EXTREMELY
> slow at others, with delays reaching 1-2 minutes at times. The
> connection has timed-out once or twice (the client software timed-out,
> actually, waiting for the connection)
>
> Telnetting to port 110 on the server revealed that the welcome message
> from the server would appear after a variable delay time. After entering
> the username, it sometimes takes a minute or more to get the prompt for
> the password. After entering the password, then the process of data
> transfer from server to client is very quick, with no errors.
>
> I am experiencing the same delay characteristics when connecting to
> SMTP, and when using PuTTY. Once I get logged on with PuTTY, I am able
> to 'su root', do anything I need to on the server, without any
> noticeable delay in response (I'm not saying there is no delay, only
> that I do not notice any). I use WinSCP3 v3.6.8 to transfer files
> to/from the server, and have noticed that after I get through the
> (delayed) login process, the file transfers occur very quickly, always,
> without errors.
>
> Logging in at the server console always works perfectly.
>
> 'netstat -an' shows that, during those periods where I am telnetting to
> port 110, and waiting through one of these delays for just the welcome
> message, an established connection already exists between my workstation
> and the server. Under the 'Active Unix domain sockets' section, 'x'
> number of streams exist, and when the server does finally respond,
> additional streams have been created (as I write this, it occurs to me
> that I don't know how many additional.. maybe two or three?)
>
> Because of the nature of the symptoms, I think this is an authentication
> issue, not related to the installation of qmail, etc.
>

 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Kris Persson

External


Since: Jan 05, 2004
Posts: 6



(Msg. 3) Posted: Wed Sep 22, 2004 10:48 am
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Les Larson wrote:
....
> I immediately noticed that connecting to the POP server with email
> client software is very quick most times, but slow, slower, or EXTREMELY
> slow at others, with delays reaching 1-2 minutes at times. The
> connection has timed-out once or twice (the client software timed-out,
> actually, waiting for the connection)
....

Sounds like a name server problem. When you connect to the server it
will reverse lookup the client's IP and if that doesn't work you will
see very long delays. So make sure you can look up all your clients'
names and IPs, both ways. Example:

server# host first.client
first.client has address 1.2.3.4
server# host 1.2.3.4
1.2.3.4.IN-ADDR.ARPA domain name pointer first.client
server#

Read in the Handbook how to configure to use an external DNS, use a
hosts file or run your own DNS.

Kris
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 4) Posted: Wed Sep 22, 2004 10:48 am
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thanks, Kris, I will investigate this evening.

Les
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
sam

External


Since: Jun 12, 2004
Posts: 6



(Msg. 5) Posted: Wed Sep 22, 2004 10:48 am
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Kris Persson wrote:
> Les Larson wrote:
> ....
>
>> I immediately noticed that connecting to the POP server with email
>> client software is very quick most times, but slow, slower, or
>> EXTREMELY slow at others, with delays reaching 1-2 minutes at times.
>> The connection has timed-out once or twice (the client software
>> timed-out, actually, waiting for the connection)
>
> ....
>
> Sounds like a name server problem. When you connect to the server it
> will reverse lookup the client's IP and if that doesn't work you will
> see very long delays. So make sure you can look up all your clients'
> names and IPs, both ways. Example:
>
> server# host first.client
> first.client has address 1.2.3.4
> server# host 1.2.3.4
> 1.2.3.4.IN-ADDR.ARPA domain name pointer first.client
> server#
>
> Read in the Handbook how to configure to use an external DNS, use a
> hosts file or run your own DNS.
>
> Kris
If slowing login occured when telnet or ssh to a port (23 or 22), the
DNS setup in the server is most likely the problem.

sam
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 6) Posted: Wed Sep 22, 2004 10:48 am
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

> If slowing login occured when telnet or ssh to a port (23 or 22), the
> DNS setup in the server is most likely the problem.
>
> sam
>
The server doesn't have DNS server.

But, does FreeBSD do a reverse lookup to any client trying to connect
with any service, e.g. SSH?

Les
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 7) Posted: Wed Sep 22, 2004 10:48 am
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

OK, I reran sysinstall on my test server here, chose to use DHCP to
configure the nic, and saw that the /etc/resolv.conf file only had
entries for nameservers, not an entry for the 'blah.local' domain.
Response to requests from email client and PuTTY was solid.

I removed the domain entry in the same file on the real server, added an
additional nameserver entry (there was originally only one) and results
seem to be solid as well there.

I think this has resolved the problem (no pun intended). Thank you for
giving me the starting point. It was exactly what I needed.

Les
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Kris Persson

External


Since: Jan 05, 2004
Posts: 6



(Msg. 8) Posted: Wed Sep 22, 2004 3:10 pm
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Les Larson wrote:
>>If slowing login occured when telnet or ssh to a port (23 or 22), the
>>DNS setup in the server is most likely the problem.
>>
>>sam
>>
>
> The server doesn't have DNS server.

If you don't have an external DNS to use ("nameserver my_dns" in
/etc/resolv.conf) and don't want to run your own DNS you will have to
enter all your clients' host names in /etc/hosts.

> But, does FreeBSD do a reverse lookup to any client trying to connect
> with any service, e.g. SSH?

It is service dependent but most services, including SSH, do.
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 9) Posted: Wed Sep 22, 2004 3:10 pm
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article , kripe RemoveThis @dev.null.com says...
> Les Larson wrote:
> >>If slowing login occured when telnet or ssh to a port (23 or 22), the
> >>DNS setup in the server is most likely the problem.
> >>
> >>sam
> >>
> >
> > The server doesn't have DNS server.
>
> If you don't have an external DNS to use ("nameserver my_dns" in
> /etc/resolv.conf) and don't want to run your own DNS you will have to
> enter all your clients' host names in /etc/hosts.
>
> > But, does FreeBSD do a reverse lookup to any client trying to connect
> > with any service, e.g. SSH?
>
> It is service dependent but most services, including SSH, do.
>
Thanks again, Kris. I sent my response to you and sam about 5 seconds
before my newsreader picked up this article from you. Once I got yours
and sam's comments about DNS, I was able to start looking in that
'area' and came across the resolv.conf file. Funny, I don't even have
to break a sweat to fix Windows server issues anymore, but I'm really
'feeling in the dark' as I learn another OS from scratch. It's fun,
though... Thanks, again.
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
prodigal1

External


Since: Sep 15, 2004
Posts: 2



(Msg. 10) Posted: Wed Sep 22, 2004 3:10 pm
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Les Larson wrote:
> Funny, I don't even have
> to break a sweat to fix Windows server issues anymore,

would that be as a result of all the practice you've had? Wink
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Les Larson

External


Since: Sep 21, 2004
Posts: 7



(Msg. 11) Posted: Wed Sep 22, 2004 3:10 pm
Post subject: Re: Problems with FreeBSD authentication [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article , prodig RemoveThis @l.com says...
> Les Larson wrote:
> > Funny, I don't even have
> > to break a sweat to fix Windows server issues anymore,
>
> would that be as a result of all the practice you've had? Wink
>
DEFINITELY. Lots of 'seminars' like this Smile
 >> Stay informed about: Problems with FreeBSD authentication 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Installing problems. No Desktop. - I installed FreeBSD on an older Gateway laptop. 128 MB/ 233 MHz/ 800x600 screen/ 6 GB Hard driver with 4 GB on the hard drive set aside for FreeBSD. Windows 98 SE is installed in the other 2 GB. FreeBSD appears to be installed correctly, but I cannot ...

Problems with named 8.3.6-REL - I have been trying to get my local dns server running for days now with no success. I have checked the freeBSD handbook at www.freebsd.org and followed their instructions and all of the files seem to be correct. I am listing the contents of such files...

Problems using vinum for the root filesystem - Hello, I would like to use vinum to mirror the root filesystem but unfortunately have already a problem with the beginning of the documentation (FreeBSD Handbook Chapter 13 - Vinum, Part 9 - Using vinum for the Root Filesystem): at point 13.9.2 it sais...

[FreeBSD-Announce] FreeBSD 5.3-RELEASE Announcement - This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig59305AECC7EFDF2CAA9A02BA Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit It is my great pleasure and privilege to announce the..

FreeBSD From Scratch (ie. My Own Custom FreeBSD) -
   FreeBSD Hosting (Home) -> FreeBSD Handbook All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]