I have a server setup up with Ubuntu 12.10. Got everything working nicely except for one thing: SSH port forwarding.
I use the following command to forward some VNC server to my PC:
ssh -L 5900:node:5900 adminuser@server
That works very well.
However, this is not true for other users:
ssh -L 5900:node:5900 someotheruser@server
This user is able to connect to the server (can log in and do something), but the port is not forwarded, i.e.
gvncviewer localhost is not finishing (says Connected to server but never asks for the password).
What do I have to do in order to allow forwarding for the other (or selected) users as well?
ssh -vv ... I got the following messages when calling
gvncviewer localhost and having connected using the adminuser:
debug1: Connection to port 5900 forwarding to 10.100.0.8 port 5900 requested. debug2: fd 9 setting TCP_NODELAY debug2: fd 9 setting O_NONBLOCK debug1: channel 3: new [direct-tcpip] debug2: channel 3: open confirm rwindow 2097152 rmax 32768 ... -----> It works
For the someotheruser I get:
debug1: Connection to port 5900 forwarding to 10.100.0.8 port 5900 requested. debug2: fd 9 setting TCP_NODELAY debug2: fd 9 setting O_NONBLOCK debug1: channel 3: new [direct-tcpip] -----> Here it hangs for a long time... channel 3: open failed: connect failed: Connection timed out debug2: channel 3: zombie debug2: channel 3: garbage collecting debug1: channel 3: free: direct-tcpip: listening port 5900 for 10.100.0.8 port 5900, connect from 127.0.0.1 port 39009, nchannels 4
Apparently the problem is caused by the VNC server and not by ssh.