This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: SSH V.5.1 with Cygwin1.dll 1.7.0(0.189/5/3) 2008-12-09: Very large logon times...
Please, don't http://cygwin.com/acronyms/#TOFU
On Dec 15 15:49, Carsten.Porzler wrote:
> Hello, Corinna,
>
> "large" logon time means 45 - 66 secs during public key authentication
> from viewing the banner text until an simple command has been excuted
> (e.g. "uname -a"). Password authentication works faster (about 20 sec),
> but much slower than with cygwin v.1.7.0 2008-06-18 (about 2 sec for
> password and public key authentication).
Works fine for me. A logon takes about 3 secs on my machine...
> We actually use cyglsa.dll because we need real user switching with public
> key authentication.
...using cyglsa, or, FWIW, any other logon method (create_token,
password in LSA registry). In theory, the cyglsa DLL doesn't call any
time consuming function. The main part of the job is already done in
the Cygwin DLL's seteuid() call by the calling server process, sshd in
this case. I examined the cyglsa.c code once more and there's nothing
in it which would explain the lag you're observing. The difference in
size is due to a lot of additional debug code which is kept available,
but is inactive.
Did you try to debug this problem yourself in some way? The source code
of all componentes is freely available, as you might know. I'm
wondering if something in later Cygwin 1.7 DLLs collides with some stuff
on your machine (firewall, virus checked, whatever) or with some
settings in your environment. I assume the actual delay occurs in the
Cygwin DLL, not in the cyglsa.dll. It shouldn't be too hard to find out
where it dawdles if you're willing to invest some time in debugging.
> Because of the "large logon time" problems we use the version of
> 2008-06-18 and not the newer ones.
>
> I noticed also, that the accesses to the pipes did not appear in the
> cygwin versions before 2008-06-18. Anything seems to be changed after this
> date.
Did you test the next version after that, 2008-07-26? Does it already
show the pipe access you seem to observe in recent versions? The latest
Cygwin DLLs add the password in registry stuff which also does some LSA
calls, which might explain some of the LSA pipes.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Project Co-Leader cygwin AT cygwin DOT com
Red Hat
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/