Re: hopping over ssh bastion

Hi,

On 25/06/2021 13:52, Patrik Dufresne wrote:
> Hello Adam,
> 
> When using the SSH proxy command this following message "Fatal Error:
> Truncated header string (problem probably originated remotely)" is
> generated by SSH. Usually this gets printed when the box doesn't allow ssh
> tunnel.
> 
> On the bastion server, You should review your /etc/ssh/sshd_config and make
> sure you have "AllowTcpForwarding yes".
> 
> After that, you may create a file in ~/.ssh/config
> 
> Host <hostname-behind-bastion>
>   ProxyCommand ssh -q -A -x <bastion-hostname> -W <ip-behind-bastion>:22
> 
> I invite you to test the configuration by calling ssh manually first, to
> make sure the ssh configuration is working, before trying to test it with
> rdiff-backup.

Adding to what Patrik wrote, if you can:

1. call `ssh -C hostname-behind-bastion rdiff-backup --server',
2. then type `q1234567` + Enter (only the 'q' and the length is important)
3. and the only output you get is `oquittingq.` (might look slightly
different with rdiff-backup 1.x)
4. and the command line comes back,
then you're probably good to go.

KR, Eric

> 
> 
> 
> On Fri, Jun 25, 2021 at 7:36 AM Frank Crawford <[email protected]>
> wrote:
> 
>> Adam,
>>
>> This should work with any issue, but can you share the actual
>> ProxyCommand you are using.
>>
>> Also, what do you get if you log in yourself directly?
>>
>> And you may want to up the verbosity of rdiff-backup output (e.g. -v5)
>> to see what is being returned.
>>
>> Regards
>> Frank
>>
>> On Thu, 2021-06-24 at 17:59 +0100, Adam Weremczuk wrote:
>>> Hi all,
>>>
>>> I run old rdiff-backup 1.2.8 on a remote server and one local behind
>>> an
>>> ssh bastion.
>>>
>>> Direct backup over ssh work fine but I struggle hopping over
>>> intermediary box. All 3 run Debian.
>>>
>>> I've tried ProxyCommand with and without netcat but each time I'm
>>> getting:
>>>
>>> ---------------------------------------------------------------------
>>> ----------------------------------
>>>
>>> Fatal Error: Truncated header string (problem probably originated
>>> remotely)
>>>
>>> Couldn't start up the remote connection by executing
>>>
>>>      ssh -C backup rdiff-backup --server
>>>
>>> Remember that, under the default settings, rdiff-backup must be
>>> installed in the PATH on the remote system.  See the man page for
>>> more
>>> information on this.  This message may also be displayed if the
>>> remote
>>> version of rdiff-backup is quite different from the local version
>>> (1.2.8).
>>>
>>> ---------------------------------------------------------------------
>>> ----------------------------------
>>>
>>> I haven't been able to find any recipes online and I'm assuming it's
>>> feasible.
>>>
>>> Could anyone help?
>>>
>>> Regards,
>>> Adam
>>>
>>>
>>
> 
>