public inbox for [email protected]  
help / color / mirror / Atom feed
Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba
3+ messages / 3 participants
[nested] [flat]

* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba
@ 2024-10-29 18:45 Vijaykumar Jain <[email protected]>
  2024-10-29 19:10 ` Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Alan Hodgson <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Vijaykumar Jain @ 2024-10-29 18:45 UTC (permalink / raw)
  To: Alan Hodgson <[email protected]>; +Cc: [email protected]

On Wed, 30 Oct 2024 at 00:04, Alan Hodgson <[email protected]> wrote:

> On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote:
>
> Delays between "connection received" and "connection authenticated"
> because of localhost entries in hba
>
>
> Maybe check that "files" is the first mechanism for hosts lookups in
> nsswitch.conf.
>
> afaik dig doesn't follow the same name resolution path as glibc.
>


a connection received should mean resolution was done, right ? am i missing
something?
I could try adding delay with traffic control, but then if a connection
established is logged in the log, then name resolution is ok ?

or the syscall to md5 is slow , does it work faster for trust ? just saying
:)

-- 
Thanks,
Vijay

Open to work
Resume - Vijaykumar Jain <https://github.com/cabecada;


^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba
  2024-10-29 18:45 Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Vijaykumar Jain <[email protected]>
@ 2024-10-29 19:10 ` Alan Hodgson <[email protected]>
  2024-10-29 20:00   ` Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Daniel Westermann (DWE) <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Alan Hodgson @ 2024-10-29 19:10 UTC (permalink / raw)
  To: [email protected]

On Wed, 2024-10-30 at 00:15 +0530, Vijaykumar Jain wrote:
> 
> 
> On Wed, 30 Oct 2024 at 00:04, Alan Hodgson
> <[email protected]> wrote:
> > On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote:
> > > Delays between "connection received" and "connection
> > > authenticated" because of localhost entries in hba
> > 
> > 
> > Maybe check that "files" is the first mechanism for hosts lookups
> > in nsswitch.conf.
> > 
> > afaik dig doesn't follow the same name resolution path as glibc.
> 
> 
> a connection received should mean resolution was done, right ? am
> i missing something?

Well, I'm just throwing out something to check, but I meant on the
server, not the client. It's trying to resolve "localhost" to check
the auth. If there's a delay, that's probably where it is.

I guess I just assumed that's where you were testing dig.


^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba
  2024-10-29 18:45 Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Vijaykumar Jain <[email protected]>
  2024-10-29 19:10 ` Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Alan Hodgson <[email protected]>
@ 2024-10-29 20:00   ` Daniel Westermann (DWE) <[email protected]>
  0 siblings, 0 replies; 3+ messages in thread

From: Daniel Westermann (DWE) @ 2024-10-29 20:00 UTC (permalink / raw)
  To: Alan Hodgson <[email protected]>; [email protected] <[email protected]>

>>Maybe check that "files" is the first mechanism for hosts lookups in nsswitch.conf.

>afaik dig doesn't follow the same name resolution path as glibc.

I don't know. Is there a way to test the glibc way easily?

> a connection received should mean resolution was done, right ? am i missing something?

>Well, I'm just throwing out something to check, but I meant on the server, not the client. It's trying to resolve >"localhost" to check the auth. If there's a delay, that's probably where it is.

>I guess I just assumed that's where you were testing dig.

Yes

Regards
Daniel





^ permalink  raw  reply  [nested|flat] 3+ messages in thread


end of thread, other threads:[~2024-10-29 20:00 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-10-29 18:45 Re: Delays between "connection received" and "connection authenticated" because of localhost entries in hba Vijaykumar Jain <[email protected]>
2024-10-29 19:10 ` Alan Hodgson <[email protected]>
2024-10-29 20:00   ` Daniel Westermann (DWE) <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox