public inbox for [email protected]help / color / mirror / Atom feed
Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba 3+ messages / 3 participants [nested] [flat]
* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba @ 2024-10-29 18:45 Vijaykumar Jain <[email protected]> 0 siblings, 1 reply; 3+ messages in thread From: Vijaykumar Jain @ 2024-10-29 18:45 UTC (permalink / raw) To: Alan Hodgson <[email protected]>; +Cc: [email protected] On Wed, 30 Oct 2024 at 00:04, Alan Hodgson <[email protected]> wrote: > On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote: > > Delays between "connection received" and "connection authenticated" > because of localhost entries in hba > > > Maybe check that "files" is the first mechanism for hosts lookups in > nsswitch.conf. > > afaik dig doesn't follow the same name resolution path as glibc. > a connection received should mean resolution was done, right ? am i missing something? I could try adding delay with traffic control, but then if a connection established is logged in the log, then name resolution is ok ? or the syscall to md5 is slow , does it work faster for trust ? just saying :) -- Thanks, Vijay Open to work Resume - Vijaykumar Jain <https://github.com/cabecada; ^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba @ 2024-10-29 19:10 Alan Hodgson <[email protected]> parent: Vijaykumar Jain <[email protected]> 0 siblings, 1 reply; 3+ messages in thread From: Alan Hodgson @ 2024-10-29 19:10 UTC (permalink / raw) To: [email protected] On Wed, 2024-10-30 at 00:15 +0530, Vijaykumar Jain wrote: > > > On Wed, 30 Oct 2024 at 00:04, Alan Hodgson > <[email protected]> wrote: > > On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote: > > > Delays between "connection received" and "connection > > > authenticated" because of localhost entries in hba > > > > > > Maybe check that "files" is the first mechanism for hosts lookups > > in nsswitch.conf. > > > > afaik dig doesn't follow the same name resolution path as glibc. > > > a connection received should mean resolution was done, right ? am > i missing something? Well, I'm just throwing out something to check, but I meant on the server, not the client. It's trying to resolve "localhost" to check the auth. If there's a delay, that's probably where it is. I guess I just assumed that's where you were testing dig. ^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba @ 2024-10-29 20:00 Daniel Westermann (DWE) <[email protected]> parent: Alan Hodgson <[email protected]> 0 siblings, 0 replies; 3+ messages in thread From: Daniel Westermann (DWE) @ 2024-10-29 20:00 UTC (permalink / raw) To: Alan Hodgson <[email protected]>; [email protected] <[email protected]> >>Maybe check that "files" is the first mechanism for hosts lookups in nsswitch.conf. >afaik dig doesn't follow the same name resolution path as glibc. I don't know. Is there a way to test the glibc way easily? > a connection received should mean resolution was done, right ? am i missing something? >Well, I'm just throwing out something to check, but I meant on the server, not the client. It's trying to resolve >"localhost" to check the auth. If there's a delay, that's probably where it is. >I guess I just assumed that's where you were testing dig. Yes Regards Daniel ^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2024-10-29 20:00 UTC | newest] Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2024-10-29 18:45 Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Vijaykumar Jain <[email protected]> 2024-10-29 19:10 ` Alan Hodgson <[email protected]> 2024-10-29 20:00 ` Daniel Westermann (DWE) <[email protected]>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox