[SATLUG] SSH Forwarding Problem

David Kowis dkowis at shlrm.org
Fri May 4 22:59:06 CDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Sean Carolan wrote:
> Maybe someone can help me figure this out.  I have three machines,
> let's call them apple, banana and cherry.  Apple is my workstation,
> banana is a box that I can SSH to, and cherry is only available from
> banana.
> 
> If I run these commands everything works fine:
> 
> $ ssh -L 2022:cherry:22 banana
> $ ssh localhost -p 2022
> 
> And I get immediately connected to cherry with no problem.
> 
> When I try to put these settings into my ~/.ssh/config file I get this
> error on the client:
> ssh_exchange_identification: Connection closed by remote host
> 
> And this error on the server:
> channel 47: open failed: administratively prohibited: open failed
> 
> Here is a copy of my ~/.ssh/config file:
> 
> ****************
> Host banana
> Hostname banana.full.domain.name
> LocalForward 21031 cherry.full.domain.name:22
> 
> Host cherry
> Hostname localhost
> Port 21031
> HostKeyAlias cherry
> ***************
> 
> What's really frustrating is that the config file works fine for some
> hosts, but not for others.  There are about six problem hosts on my
> network that are not allowing the local port forwarding.  Any
> suggestions???


Check the obvious? Permissions on the .ssh dir? Permissions on the
files? Those usually get me :/ Ownership matters too. I didn't even know
you could do things like you're talking about ;)

- --
David Kowis

www.sourcemage.org
SourceMage GNU/Linux

Progress isn't made by early risers. It's made by lazy men trying to
find easier ways to do something.
  - Robert Heinlein
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=SsYF
-----END PGP SIGNATURE-----


More information about the SATLUG mailing list