id summary reporter owner description type status priority milestone component resolution keywords cc fix_version see_also 787 GSSAPIKeyExchange causes delays when sshing to non-MIT servers andersk "From the zlogs a year ago (-c debathena -i gssapikeyechange, 2010-01-12), and rediscovered by various other people since then: GSSAPIKeyExchange causes ~3 second delays when sshing to non-MIT servers: {{{ … debug1: Local version string SSH-2.0-OpenSSH_5.2p1 Debian-1ubuntu1 debug2: fd 3 setting O_NONBLOCK [1 second pause] debug1: Unspecified GSS failure. Minor code may provide more information Server krbtgt/MIT.EDU@ATHENA.MIT.EDU not found in Kerberos database [1 second pause] debug1: Unspecified GSS failure. Minor code may provide more information Server krbtgt/MIT.EDU@ATHENA.MIT.EDU not found in Kerberos database [1 second pause] debug1: Unspecified GSS failure. Minor code may provide more information debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received … }}} From a wireshark dump, it appears to be trying and failing to obtain the following TGSs from kerberos.mit.edu: {{{ host/longitude.lan krbtgt/LAN krbtgt/EDU krbtgt/MIT.EDU host/longitude.lan krbtgt/LAN krbtgt/EDU krbtgt/MIT.EDU host/longitude.lan krbtgt/LAN krbtgt/EDU krbtgt/MIT.EDU }}} This is a distinct issue from #315/#653, as this is about a server with no Debathena or Kerberos configuration of any kind. " defect new normal The Distant Future --