Unwanted reverse mapping of ip addresses

[Thomas Binder]

Hi!

On Thu, Feb 27, 2003 at 11:57:35AM -0600, Aaron Bostick wrote:
> I am using Solaris 8 with ssh 3.4p1, and this piece of code:
> 
>         debug3("Trying to reverse map address %.100s.", ntop);
>         /* Map the IP address to a host name. */
>         if (getnameinfo((struct sockaddr *)&from, fromlen, name,
> sizeof(name),
>             NULL, 0, NI_NAMEREQD) != 0) {
>                 /* Host name not found.  Use ip address. */
>                 log("Could not reverse map address %.100s.", ntop);
>                 return xstrdup(ntop);
> 
> takes like 30 to 60 seconds to run if you have dns listed in your
> nsswitch.conf, which in many cases is needed.

It only takes that long if you've configured nameservers in
/etc/resolv.conf that do not respond to queries. First check that
everything's set up properly.

If you still insist on sshd not making nameserver lookups, take a
look at sshd's manpage, option '-u' in particular.


Ciao

Thomas