OpenSSH and hostname resolution issues on Solaris

[Darren Tucker]

Hannu Liljemark wrote:
[DNS problems]
> Worst case the machine never gets past starting sshd during
> boot, but usually you "just" can't reach the machine with ssh.
> The OpenSSH in question is anything from ~2.9 to 3.5p1,
> compiled with tcp_wrappers and sshd: ALL in hosts.allow (if
> that matters). OS is Solaris 8, but I think we've had it in
> Sol7 as well.

Some of the commands in ssh_prng_cmds might rely on DNS (the arp command
is a common offender) and thus hang. This will cause ssh-rand-helper to
hang. It's supposed to time out but didn't always. See
http://bugzilla.mindrot.org/show_bug.cgi?id=400

> Some simple solution for the problem we've haven't
> noticed?

Try http://bugzilla.mindrot.org/attachment.cgi?id=156&action=view

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.