Re: [gentoo-security] PAM takes a long time[Solved?].

[Tarragon Allen]

On Friday 09 April 2004 01:35, Volkov Peter Alexandrovich wrote:
> Tarragon Allen <lists@××××××××.com> wrote:
> > I'm probably barking up the wrong tree here, but do you have any problems
> > with DNS on this machine? Whenever I see long pauses on logins and such
> > the first thing I check is that the system can resolve names properly...
>
> I was going to answer that this can not affect, but...
>
> My subnet now doesn't have local DNS server, so all DNS server are beyond
> gateway. By default this computer have no access to internet, so it can not
> resove ip.
>
> They I tried to allow this system to resolve ip. On gateway I inserted rule
> so samba server could resolve ip.
>
> 	And now no delay!!!
>
> Ok. Problem is now solved.
>
> But what to do with DNS. I don't need DNS to allow NBT to work. But using
> tcpdump on gateway i could find out that this was the problem. Samba really
> need the answer from DNS to continue authentification. Is there any
> workaround?

Defining all your client machines in /etc/hosts on the server is probably the 
easiest way, or setup a dns server on that machine that just knows how to 
resolve the local subnet only (no forwarder). 

If the local subnet is expected to change a fair bit then dns with a generated 
entry such as :

$GENERATE 0-255 ${0}   PTR     machine-$.example.com.

(this example will work with bind in a reverse dns zone file- it will create 
256 entries (0-255) starting from {0} with the resulting names being 
machine-0.example.com, machine-1.example.com, etc) 

This can help keep the admin time down, although it can make tracking down a 
fault with a specific machine a bit difficult. :)

I hope this helps.

t
-- 
GPG : http://n12turbo.com/tarragon/public.key

--
gentoo-security@g.o mailing list