[opensuse] Slow SSH connection
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request. I think this has to do with systemd, as it feels like the delay that ConsoleKit gives terminals. Any clues how to debug and fix? Ruben ruben@www:~> cat /etc/os-release NAME=openSUSE VERSION="13.2 (Harlequin)" VERSION_ID="13.2" PRETTY_NAME="openSUSE 13.2 (Harlequin) (i586)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:13.2" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://opensuse.org/" ID_LIKE="suse" -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/08/2016 02:25 PM, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request. I think this has to do with systemd, as it feels like the delay that ConsoleKit gives terminals. Any clues how to debug and fix?
Ruben ruben@www:~> cat /etc/os-release NAME=openSUSE VERSION="13.2 (Harlequin)" VERSION_ID="13.2" PRETTY_NAME="openSUSE 13.2 (Harlequin) (i586)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:13.2" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://opensuse.org/" ID_LIKE="suse"
IPV6 or IPV4 issue? Try ssh -4 you@server vs ssh -6 you@server and see if it helps. -- After all is said and done, more is said than done. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/08/2016 05:46 PM, John Andersen wrote:
On 02/08/2016 02:25 PM, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request. I think this has to do with systemd, as it feels like the delay that ConsoleKit gives terminals. Any clues how to debug and fix?
Ruben ruben@www:~> cat /etc/os-release NAME=openSUSE VERSION="13.2 (Harlequin)" VERSION_ID="13.2" PRETTY_NAME="openSUSE 13.2 (Harlequin) (i586)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:13.2" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://opensuse.org/" ID_LIKE="suse"
IPV6 or IPV4 issue? Try ssh -4 you@server vs ssh -6 you@server and see if it helps.
ssh -4 is faster but it is still slow. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Ruben Safir wrote:
On 02/08/2016 05:46 PM, John Andersen wrote:
On 02/08/2016 02:25 PM, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request. I think this has to do with systemd, as it feels like the delay that ConsoleKit gives terminals. Any clues how to debug and fix?
Ruben ruben@www:~> cat /etc/os-release NAME=openSUSE VERSION="13.2 (Harlequin)" VERSION_ID="13.2" PRETTY_NAME="openSUSE 13.2 (Harlequin) (i586)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:13.2" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://opensuse.org/" ID_LIKE="suse"
IPV6 or IPV4 issue? Try ssh -4 you@server vs ssh -6 you@server and see if it helps.
ssh -4 is faster but it is still slow.
Check your DNS setup on the server. I think name resolution might be slow. -- Per Jessen, Zürich (7.1°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 02:04 AM, Per Jessen wrote:
Check your DNS setup on the server. I think name resolution might be slow.
the resolution seems fine... lightning fast. It is systemd, I'd almost bet on it. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 02:19 AM, Ruben Safir wrote:
On 02/09/2016 02:04 AM, Per Jessen wrote:
Check your DNS setup on the server. I think name resolution might be slow.
the resolution seems fine... lightning fast. It is systemd, I'd almost bet on it.
it seems to be hanging here debug1: Server accepts key: pkalg ssh-rsa blen 279 debug2: input_userauth_pk_ok: fp SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug3: sign_and_send_pubkey: RSA SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug1: Authentication succeeded (publickey). Authenticated to www ([96.57.23.82]:22). debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Tue, Feb 09, 2016 at 02:26:39AM -0500, Ruben Safir wrote:
Check your DNS setup on the server. I think name resolution might be slow.
the resolution seems fine... lightning fast. It is systemd, I'd almost bet on it.
it seems to be hanging here
debug1: Server accepts key: pkalg ssh-rsa blen 279 debug2: input_userauth_pk_ok: fp SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug3: sign_and_send_pubkey: RSA SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug1: Authentication succeeded (publickey). Authenticated to www ([96.57.23.82]:22). debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session.
Hi, Don't know if this is helpfull. I noticed the same problem on several of my machines, running 13.1 and 13.2 after some update(s). Unfortunate, i do not remember them anymore. However, even on a local machine, when i wanted to switch user i noticed the same problem. After typing the password it took a long time before it was finally granted. The problem was solved after rebooting the machine(s). Regards, Cor van Haastregt -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 03:21 PM, Cor van Haastregt wrote:
The problem was solved after rebooting the machine(s).
There was a change in SSH config mentioned in a previous thread; that too required a reboot/restart. OK, so I 'cheat'. I use DynDNS and I use ssh-agent. The latter minimized typing :-) I've had a few kernel updates since that ssh change thread, and of course rebooted and restarted my own and the remote ssh servers that I communicate with. Which raises the issue: maybe the remote sshd needs restarting? -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 04:14 PM, Anton Aylward wrote:
There was a change in SSH config mentioned in a previous thread; that too required a reboot/restart.
I don't know why anything would require a reboot. You can just stop it and restart it unless unless something is horribly wrong. Regardless, this was don't when the cleaning help pulled out the plug. Why does getting any terminal now so long? even CTL F3 et al takes forever. Ruben -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 02:47 PM, Ruben Safir wrote:
Why does getting any terminal now so long? even CTL F3 et al takes forever.
Without you providing some more information, it's really hard to tell. E.g. ssh requires some random data available for the encryption handshake, something during the login (several profile files) could take quite long, etc. I'd also try to narrow it down: is only 1 user affected, or also other users? What if you rule out the login processing and instead specify a command like "ssh remote /bin/true"? And you should also increase the logging level of your sshd on the server side, and maybe use 'ssh -vvv' on the client side to see what's going on. Others already told you to watch the system from an already existing connection. You see we gave you several hints, but without more information and debugging on your side, I'm afraid we can't help you further. Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:03 AM, Bernhard Voelker wrote:
Without you providing some more information, it's really hard to tell. E.g. ssh requires some random data available for the encryption handshake, something during the login (several profile files) could take quite long, etc.
the cryptography is working fine -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:03 AM, Bernhard Voelker wrote:
I'd also try to narrow it down: is only 1 user affected, or also other users?
all users are affected
What if you rule out the login processing and instead specify a command like "ssh remote /bin/true"?
[ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /bin/true Password: bash: remote: command not found It is there though. I just checked. [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /bin/true Password: bash: remote: command not found [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /usr/bin/true Password: bash: remote: command not found [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote ls Password: bash: remote: command not found [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /bin/ls Password: bash: remote: command not found [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /usr/bin/ls Password: bash: remote: command not found [ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /bin/bash Password: bash: remote: command not found
And you should also increase the logging level of your sshd on the server side, and maybe use 'ssh -vvv' on the client side to see what's going on. Others already told you to watch the system from an already existing connection.
I did that already, see previous posts it gets stuck on interactive session
You see we gave you several hints, but without more information and debugging on your side, I'm afraid we can't help you further.
I don't know what other info I can give. i posted the logs, the debugging and the configs. I appreciate your help.
Have a nice day, Berny
-- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Op woensdag 10 februari 2016 09:19:14 schreef Ruben Safir:
On 02/10/2016 09:03 AM, Bernhard Voelker wrote:
I'd also try to narrow it down: is only 1 user affected, or also other users?
all users are affected
What if you rule out the login processing and instead specify a command like "ssh remote /bin/true"?
[ruben@localhost ~]$ ssh -l spam-killer www.mrbrklyn.com remote /bin/true Password: bash: remote: command not found
Obviously remote is not a command. What was meant is that you replace remote. So you should use "ssh -l spam-killer www.mrbrklyn.com /bin/true". -- fr.gr. member openSUSE Freek de Kruijf -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:32 AM, Freek de Kruijf wrote:
Obviously remote is not a command. What was meant is that you replace remote. So you should use "ssh -l spam-killer www.mrbrklyn.com /bin/true".
;) yeah yeah -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:03 AM, Bernhard Voelker wrote:
I'd also try to narrow it down: is only 1 user affected, or also other users? What if you rule out the login processing and instead specify a command like "ssh remote /bin/true"? And you should also increase the logging level of your sshd on the server side, and maybe use 'ssh -vvv' on the client side to see what's going on. Others already told you to watch the system from an already existing connection.
You see we gave you several hints, but without more information and debugging on your side, I'm afraid we can't help you further.
Have a nice day, Berny
without remote, it just works [ruben@localhost ~]$ ssh -l ruben www.mrbrklyn.com /bin/true [ruben@localhost ~]$ it still hangs on the interactive session -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 03:23 PM, Ruben Safir wrote:
without remote, it just works
[ruben@localhost ~]$ ssh -l rubenwww.mrbrklyn.com /bin/true [ruben@localhost ~]$
it still hangs on the interactive session
okay, if a non-interactive command like /bin/true just works fine, then I'd say something is strange during the logon. This should also be visible on that host when you do a 'su ruben -' or 'ssh localhost' there, and probably also with 'bash --login', right? You may see in which profile/bashrc etc. it's stuck with: ssh ruben@www.mrbrklyn.com /usr/bin/strace -f -e open,execve /bin/bash --login -c /bin/true Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 04:16 PM, Bernhard Voelker wrote:
On 02/10/2016 03:23 PM, Ruben Safir wrote:
without remote, it just works
[ruben@localhost ~]$ ssh -l rubenwww.mrbrklyn.com /bin/true [ruben@localhost ~]$
it still hangs on the interactive session
okay, if a non-interactive command like /bin/true just works fine, then I'd say something is strange during the logon.
This should also be visible on that host when you do a 'su ruben -' or 'ssh localhost' there, and probably also with 'bash --login', right?
You may see in which profile/bashrc etc. it's stuck with:
ssh ruben@www.mrbrklyn.com /usr/bin/strace -f -e open,execve /bin/bash --login -c /bin/true
I failed to mention the obvious: you'll need to have strace installed on that system. BTW: adding the -r option to strace will prefix every line with a relative timestamp. Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:03 AM, Bernhard Voelker wrote:
I'd also try to narrow it down: is only 1 user affected, or also other users? What if you rule out the login processing and instead specify a command like "ssh remote /bin/true"? And you should also increase the logging level of your sshd on the server side, and maybe use 'ssh -vvv' on the client side to see what's going on. Others already told you to watch the system from an already existing connection.
You see we gave you several hints, but without more information and debugging on your side, I'm afraid we can't help you further.
Have a nice day, Berny
ssh -vvv -l ruben www.mrbrklyn.com /bin/true 2>tmp OpenSSH_7.1p2, OpenSSL 1.0.2f 28 Jan 2016 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to www.mrbrklyn.com [96.57.23.82] port 22. debug1: Connection established. debug1: identity file /home/ruben/.ssh/id_rsa type 1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_rsa-cert type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa-cert type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ecdsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ed25519 type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ed25519-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_7.1 debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1 debug1: match: OpenSSH_6.6.1 pat OpenSSH_6.6.1* compat 0x04000000 debug2: fd 3 setting O_NONBLOCK debug1: Authenticating to www.mrbrklyn.com:22 as 'ruben' debug3: hostkeys_foreach: reading file "/home/ruben/.ssh/known_hosts" debug3: record_hostkey: found key type ECDSA in file /home/ruben/.ssh/known_hosts:3 debug3: load_hostkeys: loaded 1 keys from www.mrbrklyn.com debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: first_kex_follows 0 debug2: reserved 0 debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: first_kex_follows 0 debug2: reserved 0 debug1: kex: server->client chacha20-poly1305@openssh.com <implicit> none debug1: kex: client->server chacha20-poly1305@openssh.com <implicit> none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: Server host key: ecdsa-sha2-nistp256 SHA256:iV+1azL+gcNSg98ZmT0r0Wr2oDjaArwFzoKbbswFDjQ debug3: hostkeys_foreach: reading file "/home/ruben/.ssh/known_hosts" debug3: record_hostkey: found key type ECDSA in file /home/ruben/.ssh/known_hosts:3 debug3: load_hostkeys: loaded 1 keys from www.mrbrklyn.com debug3: hostkeys_foreach: reading file "/home/ruben/.ssh/known_hosts" debug3: record_hostkey: found key type ECDSA in file /home/ruben/.ssh/known_hosts:1 debug3: load_hostkeys: loaded 1 keys from 96.57.23.82 debug1: Host 'www.mrbrklyn.com' is known and matches the ECDSA host key. debug1: Found key in /home/ruben/.ssh/known_hosts:3 debug2: set_newkeys: mode 1 debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug2: set_newkeys: mode 0 debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug2: key: /home/ruben/.ssh/id_rsa (0x562c22267690), debug2: key: /home/ruben/.ssh/id_dsa ((nil)), debug2: key: /home/ruben/.ssh/id_ecdsa ((nil)), debug2: key: /home/ruben/.ssh/id_ed25519 ((nil)), debug1: Authentications that can continue: publickey,keyboard-interactive debug3: start over, passed a different list publickey,keyboard-interactive debug3: preferred publickey,keyboard-interactive,password debug3: authmethod_lookup publickey debug3: remaining preferred: keyboard-interactive,password debug3: authmethod_is_enabled publickey debug1: Next authentication method: publickey debug1: Offering RSA public key: /home/ruben/.ssh/id_rsa debug3: send_pubkey_test debug2: we sent a publickey packet, wait for reply debug1: Server accepts key: pkalg ssh-rsa blen 279 debug2: input_userauth_pk_ok: fp SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug3: sign_and_send_pubkey: RSA SHA256:IvPCNme5SnP/MnRrztjvzBb4jCmTpDQGGqpnZtgnJqk debug1: Authentication succeeded (publickey). Authenticated to www.mrbrklyn.com ([96.57.23.82]:22). debug2: fd 6 setting O_NONBLOCK debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. debug2: callback start debug2: fd 3 setting TCP_NODELAY debug3: ssh_packet_set_tos: set IP_TOS 0x08 debug2: client_session2_setup: id 0 debug1: Sending command: /bin/true debug2: channel 0: request exec confirm 1 debug2: callback done debug2: channel 0: open confirm rwindow 0 rmax 32768 debug2: channel 0: rcvd adjust 2097152 debug2: channel_input_status_confirm: type 99 id 0 debug2: exec request accepted on channel 0 debug2: channel 0: rcvd eof debug2: channel 0: output open -> drain debug2: channel 0: obuf empty debug2: channel 0: close_write debug2: channel 0: output drain -> closed debug1: client_input_channel_req: channel 0 rtype exit-status reply 0 debug1: client_input_channel_req: channel 0 rtype eow@openssh.com reply 0 debug2: channel 0: rcvd eow debug2: channel 0: close_read debug2: channel 0: input open -> closed debug2: channel 0: rcvd close debug3: channel 0: will not send data after close debug2: channel 0: almost dead debug2: channel 0: gc: notify user debug2: channel 0: gc: user detached debug2: channel 0: send close debug2: channel 0: is dead debug2: channel 0: garbage collecting debug1: channel 0: free: client-session, nchannels 1 debug3: channel 0: status: The following connections are open: #0 client-session (t4 r0 i3/0 o3/0 fd -1/-1 cc -1) debug1: fd 2 clearing O_NONBLOCK Transferred: sent 3140, received 2508 bytes, in 2.8 seconds Bytes per second: sent 1116.7, received 891.9 debug1: Exit status 0 -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:25 AM, Ruben Safir wrote:
ssh -vvv -l ruben www.mrbrklyn.com /bin/true 2>tmp
OpenSSH_7.1p2, OpenSSL 1.0.2f 28 Jan 2016 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to www.mrbrklyn.com [96.57.23.82] port 22. debug1: Connection established. debug1: identity file /home/ruben/.ssh/id_rsa type 1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_rsa-cert type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa-cert type -1 debug1: key_load_public: No such file or directory
OK, as i said, I 'cheat', I use ssh-agent anton@Mainbox:~> eval $(ssh-agent) Agent pid 26106 anton@Mainbox:~> ssh-add Enter passphrase for /home/anton/.ssh/id_rsa: Identity added: /home/anton/.ssh/id_rsa (/home/anton/.ssh/id_rsa) Oh, look! I have a 'id_rsa' style key, you don't. Nor do you have a 'id_dsa' one. How come? Perhaps that accounts for part of the delay? Why don't you generate those keys?
debug1: identity file /home/ruben/.ssh/id_ecdsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: No such file or directory
Oh, right, new and spiffy! Have you done the following: sudo ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ” Apparently not.
debug1: identity file /home/ruben/.ssh/id_ed25519 type -1 debug1: key_load_public: No such file or directory
We're running out of options and the clock is ticking ..
.... debug3: hostkeys_foreach: reading file "/home/ruben/.ssh/known_hosts" debug3: record_hostkey: found key type ECDSA in file /home/ruben/.ssh/known_hosts:3 debug3: load_hostkeys: loaded 1 keys from www.mrbrklyn.com debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received
I wish this was time-stamped. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:54 AM, Anton Aylward wrote:
On 02/10/2016 09:25 AM, Ruben Safir wrote:
ssh -vvv -l ruben www.mrbrklyn.com /bin/true 2>tmp
OpenSSH_7.1p2, OpenSSL 1.0.2f 28 Jan 2016 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to www.mrbrklyn.com [96.57.23.82] port 22. debug1: Connection established. debug1: identity file /home/ruben/.ssh/id_rsa type 1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_rsa-cert type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_dsa-cert type -1 debug1: key_load_public: No such file or directory
OK, as i said, I 'cheat', I use ssh-agent
anton@Mainbox:~> eval $(ssh-agent) Agent pid 26106 anton@Mainbox:~> ssh-add Enter passphrase for /home/anton/.ssh/id_rsa: Identity added: /home/anton/.ssh/id_rsa (/home/anton/.ssh/id_rsa)
Oh, look! I have a 'id_rsa' style key, you don't. Nor do you have a 'id_dsa' one.
How come?
ruben@www:~/.ssh> ls -al total 52 drwx------ 2 ruben users 119 Nov 27 2014 . drwxr-xr-x 127 ruben users 16384 Feb 10 10:32 .. -rw-r--r-- 1 ruben users 407 Feb 14 2013 authoried_keys -rw-r--r-- 1 ruben users 2386 Dec 27 2014 authorized_keys -rw------- 1 ruben users 1679 Jan 20 2013 id_rsa -rw-r--r-- 1 ruben users 391 Jan 20 2013 id_rsa.pub -rw------- 1 ruben users 11572 Jan 21 2015 known_hosts -rw-r--r-- 1 ruben users 2110 Jan 6 2013 known_hosts.old which is the same files on my workstation, actually [ruben@localhost ~]$ ls -al ./.ssh/ total 42 drwxrwxrwx 2 ruben users 200 Feb 9 03:33 . drwxrwxrwx 186 ruben users 14160 Feb 10 09:24 .. -rwxrwxrwx 1 ruben users 614 Nov 22 2014 authorized_keys -rw------- 1 ruben users 1679 Dec 30 2014 id_rsa -rwxrwxrwx 1 ruben users 395 Dec 30 2014 id_rsa.pub -rwxrwxrwx 1 ruben users 2441 Feb 9 03:33 known_hosts -rwxrwxrwx 1 ruben users 9894 Nov 22 2014 known_hosts.old
Perhaps that accounts for part of the delay?
authentication doesn't seem to be the problem.
Why don't you generate those keys?
debug1: identity file /home/ruben/.ssh/id_ecdsa type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/ruben/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: No such file or directory
Oh, right, new and spiffy!
Have you done the following:
sudo ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ”
Apparently not.
debug1: identity file /home/ruben/.ssh/id_ed25519 type -1 debug1: key_load_public: No such file or directory
We're running out of options and the clock is ticking ..
.... debug3: hostkeys_foreach: reading file "/home/ruben/.ssh/known_hosts" debug3: record_hostkey: found key type ECDSA in file /home/ruben/.ssh/known_hosts:3 debug3: load_hostkeys: loaded 1 keys from www.mrbrklyn.com debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received
I wish this was time-stamped.
It works faster than the terminal can record it until it gets to the interaction line, so there seems to be a problem with allocating a resource, like a /dev/tty or a port or I don't know. Ruben -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:51 AM, Ruben Safir wrote:
On 02/10/2016 09:54 AM, Anton Aylward wrote:
Oh, look! I have a 'id_rsa' style key, you don't. Nor do you have a 'id_dsa' one.
How come?
ruben@www:~/.ssh> ls -al total 52 drwx------ 2 ruben users 119 Nov 27 2014 . drwxr-xr-x 127 ruben users 16384 Feb 10 10:32 .. -rw-r--r-- 1 ruben users 407 Feb 14 2013 authoried_keys -rw-r--r-- 1 ruben users 2386 Dec 27 2014 authorized_keys -rw------- 1 ruben users 1679 Jan 20 2013 id_rsa -rw-r--r-- 1 ruben users 391 Jan 20 2013 id_rsa.pub -rw------- 1 ruben users 11572 Jan 21 2015 known_hosts -rw-r--r-- 1 ruben users 2110 Jan 6 2013 known_hosts.old
Yes but your debug trace said
debug1: identity file /home/ruben/.ssh/id_rsa type 1 debug1: key_load_public: No such file or directory
which is the same files on my workstation, actually
So it doesn't matter which end that error message at debug1 comes from. Something there isn't consistent.
It works faster than the terminal can record it until it gets to the interaction line, so there seems to be a problem with allocating a resource, like a /dev/tty or a port or I don't know.
It a 'pty', and I raise this matter in another post in this thread. q.v. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-10 14:47, Ruben Safir wrote:
Why does getting any terminal now so long? even CTL F3 et al takes forever.
Because they are created the instant you want to use them, not before, during boot. But it should happen fast. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
On 02/10/2016 09:11 AM, Carlos E. R. wrote:
On 2016-02-10 14:47, Ruben Safir wrote:
Why does getting any terminal now so long? even CTL F3 et al takes forever.
Because they are created the instant you want to use them, not before, during boot. But it should happen fast.
that has never been fast with any system I've touched with systemd. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:50 AM, Ruben Safir wrote:
that has never been fast with any system I've touched with systemd.
Assuming that you're not a anti-system wingnut, like those who want to murder Leonard, then it seems you have a system that is not optimally configured. It seems that, if what you say is correct, the creation of dynamic 'terminals' is the issue. That's more to do with the kernel or perhaps a I ssh out (as I say, I use ssh-agent) and its instant, even transatlantic or transamerica(16 hops). I look at 'ps' when the connection is up and see ssh is using 'pts/2' Where does that come from? Under /dev/pts/ there are 8 pre-created ttys that I own. Do you have those? if not, why not? If they are not there or you don't own them, that could account for it. RTFM as 'man 4 pts' & 'man 7 pty' I don't see this as systemd matter. Maybe a polkit matter or an apparmor matter. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:21 AM, Anton Aylward wrote:
On 02/10/2016 09:50 AM, Ruben Safir wrote:
that has never been fast with any system I've touched with systemd.
Assuming that you're not a anti-system wingnut, like those who want to murder Leonard, then it seems you have a system that is not optimally configured.
I am but it doesn't matter, my personal feelings. I need to work with it and it is not helping to just ignor what should be a fixable problem, even for potteringware.
It seems that, if what you say is correct, the creation of dynamic 'terminals' is the issue.
That is just experienced speculation. I don't know if the slow CouncilKit response is directly related to the SSH issue. It wasn't before the upgrade. What changed?
That's more to do with the kernel or perhaps a
My openrc workstations are not suffering this problem
I ssh out (as I say, I use ssh-agent) and its instant, even transatlantic or transamerica(16 hops).
I look at 'ps' when the connection is up and see ssh is using 'pts/2' Where does that come from? Under /dev/pts/ there are 8 pre-created ttys that I own. Do you have those? if not, why not?
good tip. I'll follow up
If they are not there or you don't own them, that could account for it.
RTFM as 'man 4 pts' & 'man 7 pty'
I don't see this as systemd matter. Maybe a polkit matter or an apparmor matter.
has there been an apparmor change in configuation?
-- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:42 AM, Ruben Safir wrote:
It wasn't before the upgrade. What changed?
What upgrade? There was a ssh upgrade not long ago. Is that what you're referring to? We discussed that and its impact in another thread. q.v. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:51 AM, Anton Aylward wrote:
There was a ssh upgrade not long ago. Is that what you're referring to?
We discussed that and its impact in another thread. q.v.
i upgraded from 13.1 to 13.2, and then this happened. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:53 AM, Ruben Safir wrote:
On 02/10/2016 10:51 AM, Anton Aylward wrote:
There was a ssh upgrade not long ago. Is that what you're referring to?
We discussed that and its impact in another thread. q.v.
i upgraded from 13.1 to 13.2, and then this happened.
What version of ssh, sshd and kernel are you running? Oh, and just to feed your systemd paranoid, what versions of systemd, udevd etc? -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 10:59 AM, Anton Aylward wrote:
On 02/10/2016 10:53 AM, Ruben Safir wrote:
On 02/10/2016 10:51 AM, Anton Aylward wrote:
There was a ssh upgrade not long ago. Is that what you're referring to?
We discussed that and its impact in another thread. q.v.
i upgraded from 13.1 to 13.2, and then this happened.
What version of ssh, sshd and kernel are you running?
Oh, and just to feed your systemd paranoid, what versions of systemd, udevd etc?
OpenSSH_6.6.1p1, OpenSSL 1.0.1k-fips 8 Jan 2015 ruben@www:~> sudo ssh -V OpenSSH_6.6.1p1, OpenSSL 1.0.1k-fips 8 Jan 2015 ruben@www:~> sudo systemd --version systemd 210 +PAM -LIBWRAP +AUDIT +SELINUX -IMA +SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ +SECCOMP +APPARMOR ruben@www:~> sudo udevd --version 210 -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 11:09 AM, Ruben Safir wrote:
On 02/10/2016 10:59 AM, Anton Aylward wrote:
On 02/10/2016 10:53 AM, Ruben Safir wrote:
On 02/10/2016 10:51 AM, Anton Aylward wrote:
There was a ssh upgrade not long ago. Is that what you're referring to?
We discussed that and its impact in another thread. q.v.
i upgraded from 13.1 to 13.2, and then this happened.
What version of ssh, sshd and kernel are you running?
Oh, and just to feed your systemd paranoid, what versions of systemd, udevd etc?
OpenSSH_6.6.1p1, OpenSSL 1.0.1k-fips 8 Jan 2015
ruben@www:~> sudo ssh -V OpenSSH_6.6.1p1, OpenSSL 1.0.1k-fips 8 Jan 2015
That's the same as mine on my 13.1 system that I used for the test earlier.
ruben@www:~> sudo systemd --version systemd 210 +PAM -LIBWRAP +AUDIT +SELINUX -IMA +SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ +SECCOMP +APPARMOR
Again, same as on my 13.1 system
ruben@www:~> sudo udevd --version 210
Once again, same as on my 13.1 So, being common between a system that works, mine, and one that doesn't, yours, they being all the same, we can eliminate them. We might argue over config files, but honestly I doubt that. I think it, as you've already mentioned, has to do with the creation of a terminal, since that's the difference for you between the "/bin/true" and the interactive modes. Which gets back to the matter of the ptys. Now the ptys are to do with IO and I think that has to do with the kernel rather than systemd I'm running Linux Mainbox 4.4.1-3.g2b16688-default #1 SMP PREEMPT Thu Feb 4 17:43:46 UTC 2016 (2b16688) x86_64 x86_64 x86_64 GNU/Linux Yes I have a multi-core Intel chip so it really is SMP. I can't see that matters. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAla79ZMACgkQja8UbcUWM1x0NQEAhRLSHPHOQRzkzUHyLV2+IthL 7CkkD3JDUd2AOIK++ssA/R3HmzN7Z6IqY12Y1KXZKNx4YEXPLFY3kDmx5D8EG9RA =fXs3 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
11.02.2016 05:44, Carlos E. R. пишет:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
The program versions shown correspond to 13.2 (at least 13.2 with current patched, I am lazy to track it back). Which just means that raw upstream version is more or less useless when comparing packages from distribution. One always need to show package version.
On 02/10/2016 10:22 PM, Andrei Borzenkov wrote:
11.02.2016 05:44, Carlos E. R. пишет:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
The program versions shown correspond to 13.2 (at least 13.2 with current patched, I am lazy to track it back). Which just means that raw upstream version is more or less useless when comparing packages from distribution. One always need to show package version.
I don't understand. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-11 05:06, Ruben Safir wrote:
On 02/10/2016 10:22 PM, Andrei Borzenkov wrote:
11.02.2016 05:44, Carlos E. R. пишет:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
The program versions shown correspond to 13.2 (at least 13.2 with current patched, I am lazy to track it back). Which just means that raw upstream version is more or less useless when comparing packages from distribution. One always need to show package version.
I don't understand.
That you must post here the rpm package version of the programs you were asked about, not the version reported on the command line by those same programs as you did. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded. I have, according to zypper info Information for package systemd: -------------------------------- Repository: openSUSE-13.1-Update Name: systemd Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date Information for package udev: ----------------------------- Repository: openSUSE-13.1-Update Name: udev Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date Information for package openssh: -------------------------------- Repository: openSUSE-13.1-Update Name: openssh Version: 6.2p2-3.7.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
On 02/11/2016 08:06 AM, Carlos E. R. wrote:
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should.
what zypper update doesn't work anylonger? -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 08:34 AM, Ruben Safir wrote:
On 02/11/2016 08:06 AM, Carlos E. R. wrote:
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should.
what zypper update doesn't work anylonger?
So I looked with zypper and it said systemd is not updated so I updated it and it is hanging on udev Retrieving: udev-210.1453291613.c8d5bdf-25.30.1.i586.rpm ...................................................................[done] Checking for file conflicts: ...............................................................................................[done] (1/1) Installing: udev-210.1453291613.c8d5bdf-25.30.1 ......................................................................[done -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 09:08 AM, Ruben Safir wrote:
> Perhaps Ruben can supply the same for his "13.2' system, and also tell > us how he upgraded.
Yes, he should.
what zypper update doesn't work anylonger?
So I looked with zypper and it said systemd is not updated so I updated it and it is hanging on udev
Retrieving: udev-210.1453291613.c8d5bdf-25.30.1.i586.rpm ...................................................................[done] Checking for file conflicts: ...............................................................................................[done] (1/1) Installing: udev-210.1453291613.c8d5bdf-25.30.1 ......................................................................[done
Why are you doing this? It tells us nothing new. You still have version 210. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 08:34 AM, Ruben Safir wrote:
On 02/11/2016 08:06 AM, Carlos E. R. wrote:
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should.
what zypper update doesn't work anylonger?
of course it works. The issue is where it is updating from? That's why the "info" tells me the repository. A really, really critical Carlos would have me produce the "zypper lr --url" for those repositories. Even so, where does the source for the build for those repositories come from upstream? It may be that the 13.1/update and 13.2 repertoires have the same packages. It may be that the packages are numbered differently but the version of the software in them is the same. Or it may be that something went wrong with your upgrade and even though your record in /etc/os-release says 13.2 the resitories you are using are still 13.1 There are a few other possibilities I'm sure Carlos can come up with as well. Oh, and by the way, what kernel are you running? -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Op donderdag 11 februari 2016 08:34:52 CET schreef Ruben Safir:
On 02/11/2016 08:06 AM, Carlos E. R. wrote:
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should.
what zypper update doesn't work anylonger? Of course zypper up works, but not to solve things like a mix of two openSUSE versions. Have a look at your repos. Remove any 13.1 repo and run zypper dup to make sure all your installed packages are openSUSE 13.2 packages.
-- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 09:14 AM, Knurpht - Gertjan Lettink wrote:
what zypper update doesn't work anylonger?
Of course zypper up works, but not to solve things like a mix of two openSUSE versions. Have a look at your repos. Remove any 13.1 repo and run zypper dup to make sure all your installed packages are openSUSE 13.2 packages.
Good advice! -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 08:06 AM, Carlos E. R. wrote:
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zyppe
yeah but the DVD upgrade was a while ago. I ran a zypper upgrade in January 1/19 as a matter of fact. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Op donderdag 11 februari 2016 14:06:45 CET schreef Carlos E. R.:
On 2016-02-11 13:48, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
Not if you check the "Use online repositories" option during install. It will add the distribution and update repos, and allows you to add more software(patterns) than just available on the DVD.
I have, according to zypper info
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
Yes, he should.
-- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 09:11 AM, Knurpht - Gertjan Lettink wrote:
it makes me wonder *how* he upgraded.
DVD, I think. And the DVD does not upgrade it all, because it is limited size. You have to upgrade the remaining packages with zypper.
Not if you check the "Use online repositories" option during install. It will add the distribution and update repos, and allows you to add more software(patterns) than just available on the DVD.
Yes you CAN. But we don't know if he DID. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 07:48 AM, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
You didn't understand the info I sent from the applications versions? How do you upgrade? I upgrade with zypper?
I have, according to zypper info
Information for package systemd: -------------------------------- Repository: openSUSE-13.1-Update Name: systemd Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Information for package udev: ----------------------------- Repository: openSUSE-13.1-Update Name: udev Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Information for package openssh: -------------------------------- Repository: openSUSE-13.1-Update Name: openssh Version: 6.2p2-3.7.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
-- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 08:43 AM, Ruben Safir wrote:
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
You didn't understand the info I sent from the applications versions?
How do you upgrade? I upgrade with zypper?
Well, DUH! I thought there was enough contextual information there to make it clear we meant "how did you upgrade your system from 13.1 to 13.2?" Carlos seems to have assumed that you upgraded with the 13.2 DVD using the 'upgrade' option. But one interpretation of what you are saying, and please would you clarify if this is the case, is that you upgraded via the net using the modify repository and run "zypper -dup" mehtod described in the wiki. Or something else Please give details. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 09:14 AM, Anton Aylward wrote:
Well, DUH! I thought there was enough contextual information there to make it clear we meant "how did you upgrade your system from 13.1 to 13.2?"
I did that with zypper. I'm reading multiple threads on this now, sort of like a crowded elevator. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-11 15:20, Ruben Safir wrote:
On 02/11/2016 09:14 AM, Anton Aylward wrote:
Well, DUH! I thought there was enough contextual information there to make it clear we meant "how did you upgrade your system from 13.1 to 13.2?"
I did that with zypper.
zypper dup? or what, please explain.
I'm reading multiple threads on this now, sort of like a crowded elevator.
Just use threaded view. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
On 02/11/2016 09:45 AM, Carlos E. R. wrote:
On 2016-02-11 15:20, Ruben Safir wrote:
On 02/11/2016 09:14 AM, Anton Aylward wrote:
Well, DUH! I thought there was enough contextual information there to make it clear we meant "how did you upgrade your system from 13.1 to 13.2?"
I did that with zypper.
zypper dup? or what, please explain.
Indeed. Either Ruben updated from 13.1 to 13.2 with a full DVD OR he updated using 'zypper'. If course he could have done a network update with the reduced size CD, but there's nothing he said that indicates that. He could mean that he did an update with the 'update' option of the DVD AND then ran 'zypper up' for whatever repositories he had configured (which is something else he hasn't told us) back in the middle of January. Well its the middle of February now. I run 'zypper up' every day and every day I get updates. At least once a week a get updates to the kernel! And as far as I've found out so far, ptys are a kernel issue. Ruben hasn't told us, so far as I've read, what kernel he has or when he last updated that. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 08:43 AM, Ruben Safir wrote:
On 02/11/2016 07:48 AM, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
On 2016-02-10 17:21, Anton Aylward wrote:
Once again, same as on my 13.1
That can not be, as he said he updated from 13.1 to 13.2. Those things are still on 13.1 versions, apparently.
it makes me wonder *how* he upgraded.
You didn't understand the info I sent from the applications versions?
How do you upgrade? I upgrade with zypper?
OK so I upgraded again, be back on this after a reboot. Carlos, this is running on an intel ATOM which is a low power chip (on a fit/pc2) It still shouldn't. IMO, be so slow to get a terminal
I have, according to zypper info
Information for package systemd: -------------------------------- Repository: openSUSE-13.1-Update Name: systemd Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Information for package udev: ----------------------------- Repository: openSUSE-13.1-Update Name: udev Version: 210-40.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Information for package openssh: -------------------------------- Repository: openSUSE-13.1-Update Name: openssh Version: 6.2p2-3.7.1 Arch: x86_64 Vendor: openSUSE Installed: Yes Status: up-to-date
Perhaps Ruben can supply the same for his "13.2' system, and also tell us how he upgraded.
-- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/11/2016 09:17 AM, Ruben Safir wrote:
Carlos, this is running on an intel ATOM which is a low power chip (on a fit/pc2)
It still shouldn't. IMO, be so slow to get a terminal
I can't disagree with that. I have a bunch of the old ex-Closet-of-Anxiety PCs with old, old chips running under 1GHz and less than 1G of RAM that handle 586/Suse fine. I can ssh into and out of them quite adequately. I don't plan to try to run LEAP/64 on them :-) -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-11 17:00, Anton Aylward wrote:
On 02/11/2016 09:17 AM, Ruben Safir wrote:
Carlos, this is running on an intel ATOM which is a low power chip (on a fit/pc2)
It still shouldn't. IMO, be so slow to get a terminal
I can't disagree with that.
I have a bunch of the old ex-Closet-of-Anxiety PCs with old, old chips running under 1GHz and less than 1G of RAM that handle 586/Suse fine. I can ssh into and out of them quite adequately. I don't plan to try to run LEAP/64 on them :-)
Yes. But I have a pentium IV machine with 500 MB (not 500 MiB), and the text terminals take several seconds to appear after the first attempt to use them. I have to try [Enter], then [ctrl][alt][f7], and back to [ctrl][alt][f1]. Apparently it has to assign resources, and memory. Of course it swaps, but not much: 167MB. On top it has a problematic Intel video chipset, with bugs that make the screen to don't recover from dark, and no expectancy of having them solved now. It is true that previous releases were faster, but it is similar to desktop apps loading faster because they are preloaded during boot, or only when actually called. You get a faster boot, but you pay a delay later. A design decision, and as all such, it has consequences (if you don't use consoles, you save some memory and resources). On slow machines, you notice it more. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
On 2016-02-11 14:43, Ruben Safir wrote:
On 02/11/2016 07:48 AM, Anton Aylward wrote:
On 02/10/2016 09:44 PM, Carlos E. R. wrote:
it makes me wonder *how* he upgraded.
You didn't understand the info I sent from the applications versions?
Send the rpm version.
How do you upgrade? I upgrade with zypper?
Wait. We asked. You have to answer, not ask again. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2016-02-10 15:50, Ruben Safir wrote:
On 02/10/2016 09:11 AM, Carlos E. R. wrote:
On 2016-02-10 14:47, Ruben Safir wrote:
Why does getting any terminal now so long? even CTL F3 et al takes forever.
Because they are created the instant you want to use them, not before, during boot. But it should happen fast.
that has never been fast with any system I've touched with systemd.
Not here. It happens for me instantly on all my systems, except a 32 bit laptop with a Pentium IV and a difficult Intel video chip. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAla79PUACgkQja8UbcUWM1xibAD7Bs8AIUT8xIjM2LYSoBBS7zNe 7LD7q2pnVRSauxChxRIBAKCpxcOxReHuAvh0OVF4uaQB7nGXBTsmFZcxee6udB8U =IQpd -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Ruben Safir wrote:
On 02/09/2016 02:04 AM, Per Jessen wrote:
Check your DNS setup on the server. I think name resolution might be slow.
the resolution seems fine... lightning fast.
Also for the client you're coming from? Once you're logged on, try clearing the cache, then do a reverse look up on your client address. (ipv4 and ipv6 if applicable).
It is systemd, I'd almost bet on it.
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server. -- Per Jessen, Zürich (7.2°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 02:38 AM, Per Jessen wrote:
Ruben Safir wrote:
On 02/09/2016 02:04 AM, Per Jessen wrote:
Check your DNS setup on the server. I think name resolution might be slow.
the resolution seems fine... lightning fast.
Also for the client you're coming from? Once you're logged on, try clearing the cache, then do a reverse look up on your client address. (ipv4 and ipv6 if applicable).
It is systemd, I'd almost bet on it.
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server.
the hangup is after authentication -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 02:38 AM, Per Jessen wrote:
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server.
how now that the logs are gone -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 01:16 AM, Ruben Safir wrote:
On 02/09/2016 02:38 AM, Per Jessen wrote:
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server.
how now that the logs are gone
Ok come on, they are not gone. journalctl -ef -- After all is said and done, more is said than done. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 04:18 AM, John Andersen wrote:
journalctl -ef
it doesn't say anything other than that there is a significant delay between www sshd[16966]: Accepted publickey for ruben from 10.0.0.19 port etc and giving a terminal. Reuvain -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 10:27 AM, Ruben Safir wrote:
On 02/09/2016 04:18 AM, John Andersen wrote:
journalctl -ef
it doesn't say anything other than that there is a significant delay between
www sshd[16966]: Accepted publickey for ruben from 10.0.0.19 port etc
and giving a terminal.
long running quota check? Something else from the profiles being run? Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/09/2016 01:27 AM, Ruben Safir wrote:
On 02/09/2016 04:18 AM, John Andersen wrote:
journalctl -ef it doesn't say anything other than that there is a significant delay between
www sshd[16966]: Accepted publickey for ruben from 10.0.0.19 port etc
and giving a terminal.
As a test, try editing /etc/ssh/sshd_conf on the server and change this line from #UseDNS yes to UseDNS no Then restart your ssh daemon by doing "systemctl restart sshd". Try logging in and see what happens. If not fixed, put the UseDNS line back to the way it was. Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2016-02-09 10:18, John Andersen wrote:
On 02/09/2016 01:16 AM, Ruben Safir wrote:
On 02/09/2016 02:38 AM, Per Jessen wrote:
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server.
how now that the logs are gone
Ok come on, they are not gone.
journalctl -ef
Or dmesg command. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)
Ruben Safir wrote:
On 02/09/2016 02:38 AM, Per Jessen wrote:
I doubt it, but you ought to be able to tell quite easily - log on a 2nd time and follow the process from the server.
how now that the logs are gone
Install syslog-ng or rsyslog or use the systemd journal. Or follow it with strace. -- Per Jessen, Zürich (7.1°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Hey, On 08.02.2016 23:25, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request.
Do you have some very large (+1G) log file in /var/log? Henne -- Henne Vogelsang http://www.opensuse.org Everybody has a plan, until they get hit. - Mike Tyson -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/10/2016 09:21 AM, Henne Vogelsang wrote:
Hey,
On 08.02.2016 23:25, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request.
Do you have some very large (+1G) log file in /var/log?
Henne
good question. BRB ls -al /var/log |sort -k5n -rw------- 1 root root 982233 Oct 12 17:38 pbl.log -rw-r----- 1 root root 6250310 Jun 3 2015 mail-20150603 -rw-r----- 1 root root 19295627 Feb 10 09:44 mail.warn -rw-r----- 1 root root 82728035 Feb 10 09:44 warn -rw-r----- 1 root root 169436209 Feb 10 09:45 messages -rw------- 1 root root 257811072 Feb 10 09:21 btmp -rw-r----- 1 root root 582355501 Feb 10 09:44 mail.info -rw-r----- 1 root root 582380077 Feb 10 09:44 mail Looks about normal ruben@www:~> ls -alh /var/log/messages -rw-r----- 1 root root 162M Feb 10 09:45 /var/log/messages -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2016-02-10 15:47, Ruben Safir wrote:
On 02/10/2016 09:21 AM, Henne Vogelsang wrote:
Do you have some very large (+1G) log file in /var/log?
good question. BRB
ls -al /var/log |sort -k5n
-rw-r----- 1 root root 169436209 Feb 10 09:45 messages -rw------- 1 root root 257811072 Feb 10 09:21 btmp -rw-r----- 1 root root 582355501 Feb 10 09:44 mail.info -rw-r----- 1 root root 582380077 Feb 10 09:44 mail
Looks about normal
No, it does not. Files larger that 100MB there are not normal. They should have been rotated and compressed. Mine are all under 10M. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAla79poACgkQja8UbcUWM1yKqQD/Xpl6x10ysJTjhwYiVXEM4HwP 3nvaEQPKyaC3LAcmcWgBAJc2ZsJzja2TzOuO84UL0qB8ZZy/U1KR8rwIvcRLFQmd =ta79 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 02/08/2016 11:25 PM, Ruben Safir wrote:
Since I ran an upgrade on my server a few months ago, the ssh connect has been very very slow to respond to a connection request. I think this has to do with systemd, as it feels like the delay that ConsoleKit gives terminals. Any clues how to debug and fix?
Ruben ruben@www:~> cat /etc/os-release NAME=openSUSE VERSION="13.2 (Harlequin)" VERSION_ID="13.2" PRETTY_NAME="openSUSE 13.2 (Harlequin) (i586)" ID=opensuse ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:opensuse:13.2" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://opensuse.org/" ID_LIKE="suse"
Hi, i did not read the whole thread, but you also should try to debug the server side if possible. On the ssh server as root start another sshd on another Port (2222): /usr/sbin/sshd -dDp 2222 On the client connect using: ssh -v user@server -p 2222 Watch both outputs and try to remember where the server and client hang. You usually can hit return to insert blank lines to mark the positions where communication stalls.
participants (14)
-
Andrei Borzenkov -
Anton Aylward -
Bernhard Voelker -
Carlos E. R. -
Cor van Haastregt -
Florian Gleixner -
Freek de Kruijf -
Henne Vogelsang -
John Andersen -
Knurpht - Gertjan Lettink -
Lew Wolfgang -
Per Jessen -
Ruben Safir -
Ruben Safir