openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Disable UseDNS in sshd config 

The UseDNS causes the sshd server to perform a reverse DNS lookup when
a client connects which introduces reasonable delay when everything is
fine, but can be counted in seconds when DNS is not setup correctly.
This is particularly annoying when using ansible to configure the node
as it is failing with timeouts waiting for privilege escalation prompt.

This commit disables the UseDNS option since we do not use hostname
based authentication in TripleO.

Change-Id: Ib000f3488326a802d97d0bcdb3299d54248f0935
This commit is contained in:
Martin André 2018-02-15 14:10:04 +01:00
parent c93028f254
commit 7b762a6a0c
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
puppet/services/sshd.yaml
View File

@ -51,6 +51,7 @@ parameters:
GSSAPIAuthentication: 'yes'
GSSAPICleanupCredentials: 'no'
UsePAM: 'yes'
UseDNS: 'no'
X11Forwarding: 'yes'
UsePrivilegeSeparation: 'sandbox'
AcceptEnv: