Re: 5.4: Can't start ssh due to entropy source blocking?

From: Stephane Raimbault (stephane_at_enertiasoft.com)
Date: 09/02/05

  • Next message: Stephane Raimbault: "Re: 5.4: Can't start ssh due to entropy source blocking?"
    Date: Thu, 1 Sep 2005 16:40:38 -0600
    To: Kurt Buff <KBuff@zetron.com>
    
    

    Thanks for the suggestion, but it doesn't seem to be the case in my
    situation.

    However I did notice things like nslookup and host are now reporting
    this error after attempting to start /etc/rc.d/sshd start

    # host www.freebsd.org
    Entropy device is blocking.

    # nslookup www.freebsd.org
    Entropy device is blocking.

    I confirmed by rebooting the server and making sure sshd didn't try
    to start on bootup nslookup and host are working, as soon as I try to
    start sshd, I start getting the errors.

    I am baffled as to what is going on.

    Thank you,
    Stephane Raimbault, Systems Administrator

    Enertiasoft, a Premier Technologies Company
    230n, 3015 5th Avenue NE Calgary, AB, Canada T2A 6T8
    toll free. 866 ENE RTIA (363 7842)
    office. 403 228 9292
    fax. 403 228 8993

    On 1-Sep-05, at 2:58 PM, Kurt Buff wrote:

    > I ran into it just yesterday.
    >
    > I was walking a newb in our IT department through setting up a
    > server, and
    > he used all caps for the domain.tld portion of the server name -
    > testbed.ZETRON.COM.
    >
    > Had the same problem as you describe. Edited the /etc/rc.conf, had him
    > reboot and try again, and it worked just fine.
    >
    > Kurt
    >
    >
    >> -----Original Message-----
    >> From: owner-freebsd-stable@freebsd.org
    >> [mailto:owner-freebsd-stable@freebsd.org]On Behalf Of
    >> Stephane Raimbault
    >> Sent: Thursday, September 01, 2005 13:18
    >> To: Vivek Khera
    >> Cc: freebsd-stable@freebsd.org
    >> Subject: Re: 5.4: Can't start ssh due to entropy source blocking?
    >>
    >>
    >> yes sorry I wasn't more clear. I tried putting a bunch of junk on
    >> the screen as well as just left it blank and the result was the
    >> same. Is it possible I didn't provide enough junk? I haven't seen
    >> this behavior before?
    >>
    >> Thanks,
    >> Stephane
    >>
    >> On 1-Sep-05, at 2:07 PM, Vivek Khera wrote:
    >>
    >>
    >>>
    >>> On Sep 1, 2005, at 1:29 PM, Stephane Raimbault wrote:
    >>>
    >>>
    >>>
    >>>> Type a full screenful of random junk to unblock
    >>>> it and remember to finish with <enter>. This will
    >>>> timeout in 300 seconds, but waiting for
    >>>> the timeout without typing junk may make the
    >>>> entropy source deliver predictable output.
    >>>>
    >>>> Just hit <enter> for fast+insecure startup.
    >>>>
    >>>>
    >>>>
    >>>
    >>> so what did you do, just hit enter or did you follow the
    >>> instructions and type a screenful of junk?
    >>>
    >>>
    >>> Vivek Khera, Ph.D.
    >>> +1-301-869-4449 x806
    >>>
    >>>
    >>> _______________________________________________
    >>> freebsd-stable@freebsd.org mailing list
    >>> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
    >>> To unsubscribe, send any mail to "freebsd-stable-
    >>> unsubscribe@freebsd.org"
    >>>
    >>>
    >>
    >> _______________________________________________
    >> freebsd-stable@freebsd.org mailing list
    >> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
    >> To unsubscribe, send any mail to
    >> "freebsd-stable-unsubscribe@freebsd.org"
    >>
    >>
    >
    >
    >
    >
    > _______________________________________________
    > freebsd-stable@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-stable
    > To unsubscribe, send any mail to "freebsd-stable-
    > unsubscribe@freebsd.org"
    >

    _______________________________________________
    freebsd-stable@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-stable
    To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"


  • Next message: Stephane Raimbault: "Re: 5.4: Can't start ssh due to entropy source blocking?"

    Relevant Pages

    • Re: Round Robin DNS behaving strangely.
      ... I did use nslookup as well. ... The server consistently hands out the IP's to ... >> all requests for a specific host to two different web servers. ...
      (microsoft.public.windows.server.dns)
    • MX gone Mad!
      ... I'm using IIS 5.0 on a W2k server with GFI spam filtering to relay in a DMZ ... Today I started getting failed email messages. ... tested my DNS MX configuration with NSLOOKUP and noticed that NSLOOKUP is ... NSLOOKUP is treating all domains on the Internet as a host on my domain. ...
      (microsoft.public.exchange.admin)
    • RE: DNS zone transfer
      ... Asunto: RE: DNS zone transfer ... Using nslookup returns the following: ... That's nice but not as important as the other records the server ... try 'host' and nslookup. ...
      (Vuln-Dev)
    • Re: outbound mail
      ... when i run nslookup the server reply was local host. ... attempt to telnet to the remote domain host on port 25 ... > Exchange MVP ...
      (microsoft.public.exchange.admin)
    • gdm hangs
      ... gdm will hang 9 of 10 times when logging out. ... with or without the client having been connected to the Server. ... # Timed login, useful for kiosks. ... Must output the chosen host on stdout, ...
      (Debian-User)