As of this morning, I found that ssh logins into my Debian etch boxes were monumentally slow. Using the
-vvv switch it looked like the problem was down to a very long wait for
gssapi-with-mic authentication. Trying with the
-o GSSAPIAuthentication=no switch on the command line helped, although some boxes were also pausing for a very long time when dealing with public-key auth.
Upgrading to the unstable package of
openssh-server seems to have fixed the problem; although I can’t find anything explicit in the bug reports. Since
libkrb53 was upgraded recently I’m wondering whether the source of the issue is actually in there.
However, note that if you’ve previously had
ssh-krb5 installed, and have had the upgrade to
openssh-server occur, you may have an old
ssh-krb5 process kicking around. I found that in general,
/etc/init.d/ssh-krb5 didn’t get removed;
/etc/init.d/ssh just got installed alongside it, so be careful when rebooting.