PAM密码验收和会话在CentOS5上打开的时间差

我有一个非常有趣的情况。 我有一台运行CentOS5.5的服务器,每当我尝试使用任何外部接口的ssh时,都会持续4秒以上的延迟。 每当我使用内部接口时都没有这种延迟。 例如,从mycomputer2进入mycomputer1的时间不长,但是从mycomputer2进入mycomputer1.com进入发生延迟的外部接口。 / var / log / messages在使用密码login时显示了这一点,有一些redactions:

Mar 18 10:18:06 somecomputer sshd[788]: pam_unix(sshd:auth): authentication failure; Mar 18 10:18:06 somecomputer sshd[788]: pam_krb5[788]: TGT verified using key for ... Mar 18 10:18:06 somecomputer sshd[788]: pam_krb5[788]: authentication succeeds for user Mar 18 10:18:12 somecomputer sshd[788]: Accepted password for user from computer port myport ssh2 Mar 18 10:18:13 somecomputer sshd[788]: pam_unix(sshd:session): session opened for user myuser by (uid=0) 

这是/etc/pam.d/sshd:

 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session optional pam_keyinit.so force revoke session include system-auth session required pam_loginuid.so session required pam_limits.so 

这是system-auth:

 auth required pam_env.so auth sufficient pam_unix.so likeauth nullok auth sufficient pam_krb5.so use_first_pass auth required pam_deny.so account required pam_unix.so broken_shadow account sufficient pam_succeed_if.so uid < 100 quiet account [default=bad success=ok user_unknown=ignore] pam_krb5.so account required pam_permit.so password requisite pam_cracklib.so retry=3 password sufficient pam_krb5.so use_authtok password sufficient pam_unix.so nullok use_authtok md5 shadow password required pam_deny.so session required pam_limits.so session required pam_unix.so session required pam_krb5.so use_first_pass 

这是一个DNS问题,将UseDNS no添加到/ etc / ssh / sshd_config中,重新加载ssh并查看是否有更改。