Login to remote host via jump host

Pankaj_Gole · December 10, 2022, 12:00pm

Hello Team,

I am trying to login to remote host using jump host settings.

My ~/.ssh/config file looks like below :

Host jhmgmt.stg-id-proxy.rmb-lab.jp
HostName jhmgmt.stg-id-proxy.rmb-lab.jp

Host *.stg-id-proxy.rmb-lab.jp
ProxyCommand pomerium-cli tcp --listen - %h:%p
Port 22
User pankaj.gole-a

I am able to login my remote host using two commands as below:

ssh -F ~/.ssh/config jhmgmt.stg-id-proxy.rmb-lab.jp - This command helps me to login to jump host.
then I run normal ssh command from jumphost terminal to login to remote host as below:
ssh 240b:c0e0:102:546c:1b02:2:a:0f02

with above two steps i am able to login to my remote host from terminal app on mac. But the same thing i am not able to set using core shell. Please suggest.

yang · December 10, 2022, 2:05pm

You have to install and enable Core Helper. Then create a profile with host set to jhmgmt.stg-id-proxy.rmb-lab.jp, Core Shell will use ~/.ssh/config for ssh connection automatically.

Kindly Regards,

Yang

Pankaj_Gole · December 10, 2022, 2:13pm

I have core helper installed. Kindly find below config snap from core shell :

But still the login to jump host is failing.

yang · December 10, 2022, 2:20pm

Could you please Enable logging, and paste the desensitized log?

Yang

Pankaj_Gole · December 10, 2022, 2:30pm

kindly find the error log which i am getting as below
log (181.8 KB)

yang · December 10, 2022, 2:36pm

Please run this command in a local terminal:

which pomerium-cli

and then modify ProxyCommand directive in your ~/.ssh/config:
ProxyCommand [absolute path of pomerium-cli] tcp --listen - %h:%p

Pankaj_Gole · December 10, 2022, 2:41pm

no luck please find the snap below:

proxy command directive is added as well.

Pankaj_Gole · December 10, 2022, 3:30pm

Thanks for showing the show inspector option to view the logs. I was able to ssh to remote server after modifying the ~/.ssh/config file as below :

Host jhmgmt.stg-id-proxy.rmb-lab.jp
HostName jhmgmt.stg-id-proxy.rmb-lab.jp

Host *.stg-id-proxy.rmb-lab.jp
ProxyCommand /opt/homebrew/bin/pomerium-cli tcp --listen - %h:%p
Port 22
User pankaj.gole-a

I just had to give the full path to the pmoerium-cli binary in the config.

yang · December 11, 2022, 1:50am

Great! And, sorry for didn't explain the solution in detail.

pmoerium-cli is in search path ($PATH should contains /opt/homebrew/bin) of you local shell, so any program run in local shell could find pmoerium-cli without problem.

The $PATH environment was set in ~/.zshrc (or ~/.bashrc if you use Bash), and only take effect after you enter zsh (or bash), so Core Shell does not aware of that, we have to let ProxyCommand know where exactly pmoerium-cli is locate.

Kindly Regards,

Yang