[Bug 1318] New: There is no way to really cancel dns queries from the client

[bugzilla-daemon at bugzilla.mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=1318

           Summary: There is no way to really cancel dns queries from the
                    client
           Product: Portable OpenSSH
           Version: 4.3p2
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ssh
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: eyal.lotem at gmail.com


The option "CheckHostIP no" cancels ssh's lookup, but the ssh clinet
still calls gss_import_name with the parameter
GSS_C_NT_HOSTBASED_SERVICE. This call creates a name lookup internally
(via gss's call to krb5_sname_to_principal).

This causes "ssh" to always attempt to backresolve IP addresses. It
only gives up after about 10 seconds. This means that all ssh-based
traffic (ssh, sftp, etc) requires a 10 second initiation time (!)
before it can work, unless adding the private network IP addresses to
/etc/hosts.

I think "ssh" is the last tool I have left that still insists on
backresolving my private net IP's, and I would rather not pollute
/etc/hosts with private addresses.


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.