X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 3CAC6386F45A
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=iki.fi
Authentication-Results:	sourceware.org;
	spf=pass smtp.mailfrom=pojanisu AT gmail DOT com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
	bh=i+Ufut07eFJSruna5Ba1FnfNeJdVgx8HykZRPJHFoU4=;
	b=MclqWZ8BxrfbmKEU2DOn5gAfWT9rpFP5n5bMP1JW51/i0Z+hg3aLycj41tsOVIAXTX
	+5Cmz+e6dn7u9In5cWIRf0lMxXEYAVwUFYehqVlUQBpI6FvzER7EqJGtg/j6aHHyHS2Y
	+WDYf4EAf4V+jI/bUGDd6+XVTiBmzZ2cq5WGAWzl8vQFVMTlQ2qn1QnJUCbK16+fT3FB
	Q0jvVI49gJHKWwhTZda+Odh+FBp6aALyuGXCwF16rtMku3BcuEVbx41bPoDwEFIpPeGS
	ulQd/KdPbTTBddHY2NzE4ieUNW8bjnA+oNXg+DDYxoXquChaC+EM8FiyofBYy8lmuaFh
	wfBQ==
X-Gm-Message-State:	AOAM53171u1x5yvjG1GYzogZvOvtK59fjIfAuUajU9xQ59urJnRmBo/6
	XQE9HH1NFuzrFK76FRjB+myKbXRqoJgq2ivq2q6bwltO
X-Google-Smtp-Source:	ABdhPJzLG+WSxkshHZZ2cM53nhgiowSkQBYRsjnlRAWkDuyTp2AB1dTOFvLqR88EFhttWV3xh4iW9+eCHn7qy5YqF7s=
X-Received:	by 2002:a2e:8897:: with SMTP id k23mr2956608lji.184.1590583939685;
	Wed, 27 May 2020 05:52:19 -0700 (PDT)
MIME-Version:	1.0
From:	Pasi Oja-Nisula <pon AT iki DOT fi>
Date:	Wed, 27 May 2020 15:52:08 +0300
Message-ID:	<CAJvus-NyvyhwLo5M84mruQo8R=Wri=r2_zjPXuvhrRw_ZZRJpg@mail.gmail.com>
Subject:	Strange 120 second wait with sshd on domain controller
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-1.8 required=5.0 tests=BAYES_00,
	FREEMAIL_FORGED_FROMDOMAIN, FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,
	HTML_MESSAGE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,
	SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<http://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

I'm experincing a strange issue on domain controller where I have cygwin
and sshd service installed. This is a Windows 2019 server. There is older
domain controller on the same domain that handles all FSMO roles and it
does not have this issue (different Windows and cygwin versions though).
Replication between servers seems to work fine. Rdp connectivity to servers
is stable and shows no network issues. Cygwin sshd installation is very
basic, only thing changed is the sshd port number. I'm using the exact same
installation packages and configuration on other non-dc servers and they do
not have this issue.

When I try to login via ssh locally, everything works almost fine. I type
in the command and get password prompt immediately, enter password. Then I
get the "Last login:" row, but prompt appears only 120+ seconds later.
Usually around 124 seconds.

When I try to ssh in remotely, I get this. No password prompt, but
strangely 120+ seconds wait before it tells me that authentication failed.

2020-05-27 15:15:02 debug1: SSH2_MSG_SERVICE_ACCEPT received
2020-05-27 15:15:02 debug1: Authentications that can continue:
publickey,password,keyboard-interactive
2020-05-27 15:15:02 debug1: Next authentication method: publickey
2020-05-27 15:15:02 debug1: Offering RSA public key:
/home/pojanisu/.ssh/id_rsa
2020-05-27 15:17:08 Authentication failed.

Windows event log does not seem to help much. I have this in application
log while sshd set to debug logging level. After that nothing and no
relevant failures in security log either.
2020-05-27 15:15:02 sshd: PID 5559: debug1: temporarily_use_uid:
1049076/1049089 (e=18/18)

And now the really strange part. Sometimes this works just fine without any
waits. I have not been able to figure out whether it's after reboot or some
other mysterious events. But then hour later I'm back to this no remote
login at all and 120 seconds wait before prompt locally.

Since this is a new server, I went and undid the DC part, removed the whole
virtual server and redid everything from scratch. The second installation
has exactly the same issue.

Any ideas would be very welcome.

Pasi
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -