Login to remote host via jump host

Core Shell
#1

Hello Team,

I am trying to login to remote host using jump host settings.

My ~/.ssh/config file looks like below :

Host jhmgmt.stg-id-proxy.rmb-lab.jp
HostName jhmgmt.stg-id-proxy.rmb-lab.jp

Host *.stg-id-proxy.rmb-lab.jp
ProxyCommand pomerium-cli tcp --listen - %h:%p
Port 22
User pankaj.gole-a

I am able to login my remote host using two commands as below:

  1. ssh -F ~/.ssh/config jhmgmt.stg-id-proxy.rmb-lab.jp - This command helps me to login to jump host.
  2. then I run normal ssh command from jumphost terminal to login to remote host as below:
    ssh 240b:c0e0:102:546c:1b02:2:a:0f02

with above two steps i am able to login to my remote host from terminal app on mac. But the same thing i am not able to set using core shell. Please suggest.

#2

You have to install and enable Core Helper. Then create a profile with host set to jhmgmt.stg-id-proxy.rmb-lab.jp, Core Shell will use ~/.ssh/config for ssh connection automatically.

Kindly Regards,

Yang

#3

I have core helper installed. Kindly find below config snap from core shell :

CoreShell
CoreShell2132×1218 945 KB

But still the login to jump host is failing.

#4

Could you please Enable logging, and paste the desensitized log?

Yang

#5

kindly find the error log which i am getting as below
log (181.8 KB)

image
image2176×1478 414 KB

#6

Please run this command in a local terminal:

which pomerium-cli

and then modify ProxyCommand directive in your ~/.ssh/config:
ProxyCommand [absolute path of pomerium-cli] tcp --listen - %h:%p

#7

no luck please find the snap below:

image
image2778×1322 530 KB

proxy command directive is added as well.

#8

Thanks for showing the show inspector option to view the logs. I was able to ssh to remote server after modifying the ~/.ssh/config file as below :

Host jhmgmt.stg-id-proxy.rmb-lab.jp
HostName jhmgmt.stg-id-proxy.rmb-lab.jp

Host *.stg-id-proxy.rmb-lab.jp
ProxyCommand /opt/homebrew/bin/pomerium-cli tcp --listen - %h:%p
Port 22
User pankaj.gole-a

I just had to give the full path to the pmoerium-cli binary in the config.

#9

Great! And, sorry for didn't explain the solution in detail.

pmoerium-cli is in search path ($PATH should contains /opt/homebrew/bin) of you local shell, so any program run in local shell could find pmoerium-cli without problem.

The $PATH environment was set in ~/.zshrc (or ~/.bashrc if you use Bash), and only take effect after you enter zsh (or bash), so Core Shell does not aware of that, we have to let ProxyCommand know where exactly pmoerium-cli is locate.

Kindly Regards,

Yang