>>Maybe check that "files" is the first mechanism for hosts lookups in nsswitch.conf. >afaik dig doesn't follow the same name resolution path as glibc. I don't know. Is there a way to test the glibc way easily? > a connection received should mean resolution was done, right ? am i missing something? >Well, I'm just throwing out something to check, but I meant on the server, not the client. It's trying to resolve >"localhost" to check the auth. If there's a delay, that's probably where it is. >I guess I just assumed that's where you were testing dig. Yes Regards Daniel