ssh tunneling client settings

[Andrew Haley]

On 02/24/2010 06:23 PM, Christoph Höger wrote:
> Am Mittwoch, den 24.02.2010, 15:57 +0000 schrieb Andrew Haley:
>> On 02/24/2010 02:41 PM, Christoph Höger wrote:
>>> Hi guys,
>>>
>>> are there any special client settings one needs to have for ssh
>>> tunneling?
>>>
>>> I have the classical setup: machines A1 and A2 (both fedora 12) should
>>> access C which is only accessible from B1 (kerberos) or B2 (private key)
>>>
>>> So on A1 I used to
>>>
>>> ssh -L 10080:C:80 B1
>>>
>>> or
>>>
>>> ssh -L 10080:C:80 B2
>>>
>>> Both work fine.
>>>
>>> But on A2:
>>>
>>> ssh -L 10080:C:80 B1/B2
>>>
>>> logs me in to the machine but every connection attempt returns:
>>>
>>> channel 3: open failed: administratively prohibited: open failed
>>>
>>> Why? What kind of weird setting is this?
>>
>> Anything in the logs?  Looks like a policy issue to me.
> 
> What logs do you mean? This is a client issue. Does the ssh client write
> to local log files?

No.  I think it may be a SELinux policy issue.

See if anything is logged in any of the log files when you get this
message.

Also, make very sure that AllowTcpForwarding is set in sshd_config

Make sure no-one else has this port open.

Check the addresses.

Andrew.