SSH tunneling X to locked Windows computer.

Hi
I have recenty installed and configurated ssh to tunnel x. But I need a way to connect to it on a school computer and every other type of computer where I cant install softwares. The windows computers in school are all part of some sort of thin clients /server solution. And I cant post stuff on the desctop I can't reach the harddrives or any thing like that. I got a network share where I might be able to put stuff. Also I can't use a usb stick and start to software from there. So is there a possible way to ssh tunnel x to one of these computers?
Last edited by lintz (2010-03-03 07:52:23)

Use Putty on the windows machine. It's a simple .exe which doesn't need to be installed anywhere.
http://www.chiark.greenend.org.uk/~sgtatham/putty/
There are plenty of 'how to' guides for using Putty to access an ssh server and setting up and using tunnels.
http://souptonuts.sourceforge.net/sshtips.htm
http://jstrassburg.blogspot.com/2006/01 … th-dd.html
etc. etc.
It'll do what you want. I use the same to get from XP at work to home, and we have similar restrictions at work. Even better - by using x11vnc on Arch and then vncviewer on XP (also a simple .exe) I am able to bring up my Arch desktop as a remote desktop on my XP setup.
The one thing I haven't worked out yet is how to copy files from my Arch machine to XP at work, since I am unable to setup an ssh server at work - although I can now email them to myself using the remote desktop!
Last edited by sultanoswing (2010-03-03 08:49:30)

Similar Messages

  • SSH tunneling to connect to remote computer

    Hi,
    I have to connect to my remote database(RHEL box) from a windows using SSH tunnel
    1. I have set up the SSH tunneling(with outgoing tunnel)
    2. I have made a entry in the TNSnames.ora file
    3. I establish connection to the remote server using SSH client and when i do tnsping
    i do get connection. Even when i change the host name to some unkown name i do get a tnsping but iam not able to connect to the database. do iam wrong anywhere
    Used TNSNAMES adapter to resolve the alias
    Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = ISIL-PRJ
    -04)(PORT = 1523)) (CONNECT_DATA = (SID = ora1022b)))
    OK (800 msec)
    Used TNSNAMES adapter to resolve the alias
    Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = ISIL-PRJ
    -04)(PORT = 1523)) (CONNECT_DATA = (SID = blablabla)))
    OK (800 msec)
    even when i change my sid name i get a tnsping. can anybody explain

    Hi,
    Looking for this schema below and see if help you:
               Secure Connection
       +---->-------[SSH]-------->-----+
       |                               |
       |                               |
       ^                               |
       |       Insecure Connection     v
    CLIENT---->--------------------> ORACLE
    ssh2 -l oracle -L 1521:192.148.1.251:1521 200.10.11.12
                        |          |                |
                        |          |                |
                   A  LOCAL        |                |
                   B       INTERNAL IP ORACLE       |
                   C                       EXTERNAL IP (GATEWAY)
                                                         C                             B
          | Firewall| . . . . .|INTERNET| . . . . . . |Firewall| . . . . . . . . . . |ORACLE|
          | Gateway |                                 |Gateway |                 192.148.1.251:1521
               .                                     200.10.11.12                                  
         A     .
       |Oracle Client|
       (TNSNAMES.ORA)
         <SERVICE> =
           (DESCRIPTION =
             (ADDRESS_LIST =                     
               (ADDRESS = (PROTOCOL = TCP)(HOST = 127.0.0.1)(PORT = 1521))
             (CONNECT_DATA =
               (SID = <SID>)
           )Cheers

  • Any way to lock a computer like in Windows?

    So I'm really quite new to the Mac world, and I'm used to locking my computer when I'm not using it. With Windows, all you do is press the Windows key + L and it locks the computer, but all your programs keep running and everything. As far as I can tell, on Mac there's only one way like that, and that is to set the screen saver so that you have to type in your password to unlock the display, and set it to come on at the least time possible.
    Since I'm primarily using Leopard instead of XP for everything, surely there's a better way to keep my computer from being hijacked by annoying little brothers?

    Simple screen-lock passwords as described above will suffice for most people.
    But understand that if a miscreant has physical access to your computer and the right tools (e.g., a Leopard install DVD) they can force a reboot of the computer and do things to give themselves complete password access to your files.
    The most serious type of locking for the Mac is called an "Open Firmware Password". Setting one of those prevents things like booting from a DVD, booting in "safe" or "single user" mode, or booting into Target mode. Do some searches and read up on it before your consider trying it. Setting one of those can leave you with no recourse if your computer develops a problem, as you will not be able to boot into any of the modes that might help. Combining that with File Vault encryption of a user's Home folder (System Preferences / Security) is about the best you can do to lock things down in the standard Mac toolset.
    Do understand however, that if someone has physical access to your computer long enough to take out the disk drive and put it in another machine, you will likely find that even this degree of protection can, eventually, be compromised. All you are doing is the same thing people are doing when they put stuff in a safe -- they are making it take long enough (and require a sufficient degree of expertise) to break in that most folks won't try.
    --Bob

  • ORA Connect via SSH Tunnel on Windows failed! LINUX works ...

    Hello again,
    i tried to establish a Oracle Client Connection via SSH Tunnel on WinXP Pro.
    1. Opened SSH-Tunnel Connection with plink (putty)
    TUNNEL: 10.5.1.111:1521 => localhost:1521
    (plink works fine with telnet, MySQL Client and other stuff)
    2. Connected with Oracle Client on Tunnel END => Localhost, Port 1521
    3. WIth ORA8i i got: Paket Error, With ORA10g i get: TNS: no listener
    plink works fine, so i dont think the problem is located there.
    i tried, tnsnames.ora, easyconnect and TNS-Less. So i guess, its not related to the connection method.
    i tried the same on LINUX ... ssh tunnel and sqlplus connect ... IT WORKS !
    Does Oracle need an aditional Port?
    Does it have Problems with WIN2UNIX Connections? (ORA DB is on UNIX)
    tnx

    Hi,
    Hum..., I guess this not work!
    Looking for this schema below, you need put the 1521 port
    If you desire, access the www.ssh.com site and download other ssh program
               Secure Connection
       +---->-------[SSH]-------->-----+
       |                               |
       |                               |
       ^                               |
       |       Insecure Connection     v
    CLIENTE--->--------------------> ORACLE
    ssh2 -l oracle -L 1521:192.148.1.251:1521 200.10.11.12
                        |          |                |
                        |          |                |
                   A  LOCAL        |                |
                   B       INTERNAL IP ORACLE       |
                   C                       EXTERNAL IP (GATEWAY)
                                                         C                             B
          | Firewall| . . . . .|INTERNET| . . . . . . |Firewall| . . . . . . . . . . |ORACLE|
          | Gateway |                                 |Gateway |                 192.148.1.251:1521
               .                                     200.10.11.12                                  
         A     .
       |Oracle Client|
       (TNSNAMES.ORA)
         <SERVICO> =
           (DESCRIPTION =
             (ADDRESS_LIST =                     
               (ADDRESS = (PROTOCOL = TCP)(HOST = 127.0.0.1)(PORT = 1521))
             (CONNECT_DATA =
               (SID = <ORCL>)
           )Cheers

  • SMB through SSH tunnel

    I'm having trouble setting up samba access over an SSH tunnel. If I forward port 139 on my machine to port 139 on the server, like so,
    ssh -L 139:localhost:139 user@server
    and then connect from the finder with Go -> Connect to Server and enter "smb://localhost/username" it works great. Moreover, if I do "smbclient -L localhost -U username" I get (with names changed to protect the innocent):
    Domain=[MYSERVERNAME] OS=[Unix] Server=[Samba 3.0.24]
    Sharename Type Comment
    IPC$ IPC IPC Service (Myservername)
    username Disk Home Directories
    Domain=[MYSERVERNAME] OS=[Unix] Server=[Samba 3.0.24]
    Server Comment
    Workgroup Master
    OATESNET MYSERVERNAME
    That's great. However, I need to in fact be running a samba server on my local machine as well as accessing a remote one --- therefore, I can't forward from port 139 on my local machine because it conflicts with my local samba server (actually, I can, and it appears to be a crapshoot whether my local server or the remote server through SSH gets the connection. Weird. But that's a different story).
    So, I try and forward from a different port, say 52187. So I create my tunnel:
    ssh -L 52187:localhost:139 username@server
    Now I try and connect through the Finder. I get error:
    "The Finder cannot complete the operation because some data in "smb://localhost:52187/username" could not be read or written. (Error code -36)."
    Hmm. Let's try and diagnose from the console. I type:
    smbclient -L localhost -U username -p 52187
    It connects to the remote server, but only partially. I get the following output:
    Domain=[MYSERVERNAME] OS=[Unix] Server=[Samba 3.0.24]
    Sharename Type Comment
    IPC$ IPC IPC Service (Myservername)
    username Disk Home Directories
    Error connecting to 127.0.0.1 (Invalid argument)
    Connection to localhost failed
    NetBIOS over TCP disabled -- no workgroup available
    Weird. Note that this is with my local Samba server not running. Now, if I try and run smbclient with the local server running, I get a different error:
    Domain=[MYSERVERNAME] OS=[Unix] Server=[Samba 3.0.24]
    Sharename Type Comment
    IPC$ IPC IPC Service (Myservername)
    username Disk Home Directories
    session setup failed: NTSTATUS_LOGONFAILURE
    NetBIOS over TCP disabled -- no workgroup available
    Weirder --- so I look in the log files for the local Samba server (/var/log/samba/log.smbd). There are two new messages from the exact time when I tried to contact my remote server:
    [2007/06/20 17:35:08, 0] /SourceCache/samba/samba-100.7/samba/source/smbd/server.c:main(789)
    smbd version 3.0.10 started.
    Copyright Andrew Tridgell and the Samba Team 1992-2004
    [2007/06/20 17:35:08, 0] pdbods.c:odssamgetsampwnam(2329)
    odssam_getsampwnam: [0]getsam_recordattributes dsRecTypeStandard:Users no account for 'username'!
    Note that 'username' is not a user on my local machine. I'm not sure what would happen if it were.
    What looks like is happening to me is that the samba client is in fact contacting the server on the port that I give, but then trying to initiate some other communication (authentication?) on the default port, 139. That's why when I'm forwarding from port 139 it all works fine. That's also why I get a different error message and stuff in my local logs when the local server is running --- the samba client is contacting the remote server for part of the transaction and the local server for another part. When the local server isn't running, it just can't contact anyone and gets confused.
    The question is, how can I make the samba client consistently use the port I tell it to use? Am I missing something?
    -Andrew
    PS -- why is it that I can have both a local samba server running on port 139 and an SSH tunnel that forwards from that port at the same time? Does it have to do with what interfaces their bound on? As in, the SSH server is only bound on the loopback interface, while the Samba server is only bound on my ethernet card? That's the only explanation I could think of.

    well, I'm not doing a smb mount and have never tried to do an smb mount; only an afp mount. I'm very fortunate that I have Macs at work and home, and all authorized users to my computer are Mac users.
    I'm running OS 10.4.9 and have been doing this (afp over ssh) throughout all iterations of 10.4.x and most if not all iterations of 10.2.x up through 10.2.8 on two older computers, a 2001 Quicksilver and a 2002 Quicksilver as the servers, and using them as the clients as well along with two Powerbook G4s as clients. Also, my kids (if you call ages 20-26 "kids") afp mount via ssh tunneling as well, from an iBookG4 and iMac G5s, also running 10.4.9.
    I gotta ask a dumb question or two or three or four:
    • When you ssh, obviously you have the ssh port (only) forwarded through your router and/or modem at home, right?
    • Do you have your Mac's (the one you are trying to use as the server) firewall turned on or off? And if on, what ports/services do you have turned on in Sys Prefs Sharing? (and if off, what services are turned on?) Windows Sharing is on?
    • If you turned on personal file sharing in your "server" Mac, do you have another Mac that you could try to ssh into, tunneling port XXXX:localhost:548 then from Finder, ⌘k to localhost:XXXX, just to see if that at least works?
    • highly unlikely to make a difference, but when you ⌘k to smb://localhost:XXXX, does it help to leave off the "/username" that you had reported in preious posts as appending onto the servername?
    One last-minute comment/suggestion: There is a shareware/donationware program called sharepoints that looks pretty cool; you can check that your mount points on your server are indeed smb shared or not (as a side note, if you are so inclined, you can create additional mount points other than just users' home directories, too). I am totally clueless as to how one, from the unix command line or maybe from the NetInfo manager, might do this, so if you would be treading new ground here yourself in this regard, this program might be of some value to you.

  • Possible to ssh tunnel Bonjour traffic across different subnets?

    Hello:
    For quite some time, I have been thinking of buying a couple of iSights to enable audio/visual between two distant computers. But I really don't want to have to leave a dozen ports in my DSL modems opened up in order to use AIM or Jabber servers to iChatAV to my "usual" called parties (I can't help it, I'm paranoid - I have one ssh port open on my DSL modem at home - so most everything I do from afar -- afp (port 548), vnc( port 5900), etc., I tunnel it all over ssh).
    So, in a similar vein, what I would like to do is treat a distant computer as if it were on my local 192.168.x.x NAT subnet, in order to do a Bonjour-like iChatAV connection without having to go to through these public servers and without having to leave a dozen ports open in my firewall (or go through the drill of opening/closing ports every time I want to iChat).
    Now, if I understand this correctly, on one's local subnet, iChat AV works using Bonjour to communicate with other iChat AV users on the same subnet, which, I think, uses multicast packets. So I'm wondering if it is possible to ssh tunnel multicast traffic to a different computer like so:
    ssh -L 5297:localhost:5297 -L 5298:localhost:5298 {called.party.IP.address}
    thus being able to set up a secure point-to-point iChatAV connection?
    Anybody ever do something like this?

    Hin j.v.,
    It is possible to iChat Bonjour over a Virtual Private Network , yes.
    2:33 PM Thursday; May 4, 2006

  • Ssh tunnel how to set up in SL?

    I have a server running SL with the firewall activated.  I want to tunnel in to it from outside my own network, while on the road.  I have used SSH Tunnel Manager to do so in the past (like for 4 years) but can not get it to work today.
    On my SL Server 10.6.8 I can not find anywhere to open ports, but I understand that if I activate File Sharing and Remote Management it will open port 22.  Correct? 
    On my router I opened port 3283 and 5900.  Correct?
    Where I get stuck is what to put in to SSH Tunnel Manager.  I can not find any clear novice instructions for it anywhere.  And I am confused as to what to put where.
    Can anybody help?  Thanks.

    Thanks Bob, it is raining cats and dogs so good time to check.
    I got it all up and running. 
    I am testing from a real slow connection (on purpose as this what I have often being on the road) and the screen update is (too) slow.  I tried all your methods and can not see any different in speed (read slowness).
    BobHarris wrote:
    The reason I do this is because Chicken allows me to use reduced colors (like 8-bit colors), and the Vine Server both honors my reduced color request and it actually plays nice with reduced colors (the Mac OS X Screen Sharing server does not alway play nice with anything less then 32-bit colors, which needs a lot more bandwidth).
    Where or how do you implement this?  I can not find it anywhere.  I am on 10.6.8 btw.
    And what is more my connection over Mac's Screen Sharing client, having Vine Server server turned on or not on the remote Mac makes also no difference.  I can get in either way and speed is the same.
    Here is the setting of my remote Mac just in case I should not turn both, the last two, on:
    Than there is an other problem.
    I suppose this is not a problem as I am tunnelling in over SSH, but would like to make sure.
    I also tried to follow the instructions on the alert screen, but no such settings are to be found on the remote computer.  Must be an out of date message text.  Or am I blind?
    Looking forward to your wisdom.
    Message was edited by: ChangeAgent. 
    Had an external link for the images as they refused to upload.  Sometimes, when this happens, you can upload images after you post.  That worked so removed links.

  • Best way to screen sahre from a remote Windows computer

    The title says it all...
    While at work I am forced to use a Windows computer...is there a way to access my server and screen share with my server and it's connected computers noting that I am looking for an Apple specific solution [i.e. I don't want to use Team Viewer, LogMeIn or anything along those lines] particularly given this is one of the main reasons I am setting up a server in the first place...
    I know that I can VPN into my server but how do I then screen share...help  please...
    Thanks,
    Joel

    Linc Davis wrote:
    If you've correctly forwarded the port, that should work. But it would be safer to connect through the VPN, rather than leaving the Screen Sharing service exposed to the Internet.
    I don't use Windows and I can't recommend a Windows VNC client.
    Linc:
    Appreciate the response, a few more follow ups:
    1.  Agree, the preferred and more secure method would be to VPN into the OS X Server and then initiate the VNC client.  But, if I follow this approach / method then
    a.) Is my understanding correct that I need not open Port 5900 on the router because I will already be connected to the OS X Server?
    b) Should the answer to 1a) be correct than how does the VNC client know to initiate / launch the screen sharing request on the OS X Server instead of the Windows machine?
    2.  Is the general approach / method for accessing services outside of the network to connect via VPN and then proceed from there once connected to the OS X Server and this approach is more secure because i) there are fewer ports open to the internet [i.e. only the VPN port needs to be left open] ad ii) VPN connections are in themselves secure relative to others?
    3.  With an Airport Extreme Router in place does this mean that when I initiate an OS X Server service [i.e. screen sharing] that I should therefore reverse / undo the automatic opening of the external ports?
    Thanks,
    Joel
    While related to the previous approach [i.e. tunneling in through the VNC client] , any added information or insight you could provide as to how / why the VNC client's request to the OS X Server will be directed to the OS X Server's screen sharing port and thus initiate a screen sharing session would be greatly appreciated as I am struggling with this part.

  • I have got my iPhone 5 and i have forgot my passcode i have tried to restore and update via my windows computer and it still says sorry this iphone has a password please enter it before you sync but i dont know it ? Please help what do i do????!!

    I have got my iPhone 5 and i have forgot my passcode i have tried to restore and update via my windows computer and it still says sorry this iphone has a password please enter it before you sync but i dont know it ? Please help what do i do????!!

    Locked Out, Forgot Lock or Restrictions Passcode, or Need to Restore Your Device
    1. iOS- Forgotten passcode or device disabled after entering wrong passcode
    2. iPhone, iPad, iPod touch: Wrong passcode results in red disabled screen
    3. Restoring iPod touch after forgotten passcode
    4. What to Do If You've Forgotten Your iPhone's Passcode
    5. iOS- Understanding passcodes
    6. iTunes 10 for Mac- Update and restore software on iPod, iPhone, or iPad
    Forgotten Restrictions Passcode Help
    You will need to restore your device as New to remove a Restrictions passcode. Go through the normal process to restore your device, but when you see the options to restore as New or from a backup, be sure to choose New.
    Also, see iTunes- Restoring iOS software.

  • Jconsole - remote connection thru ssh-tunnel

    Hi all,
    I need to start jconsole on my windows-box and connect to a remote tomcat-server thru an ssh-tunnel.
    I have walked thru various posts and blogs, but finally couldn't get it running.
    On the linux-server, I have set the following JAVA_OPTS:
    export JAVA_OPTS='-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=8888 -Dcom.sun.management.jmxremote.ssl=false -Djava.rmi.server.useLocalHostname=true -Dcom.sun.management.jmxremote.authenticate=false -Djava.rmi.server.hostname=myserver'myserver is the server-name that is resolved by the hostname-command. I also tried using localhost instead.
    On the client I run the following ssh-command to create the tunnel:
    ssh tomcat@myserver -L8888:myserver:8888 -N -vWhen I try to create a remote connection with jconsole using localhost:8888, I see the following output by ssh:
    debug1: Connection to port 8888 forwarding to myserver port 8888 requested.
    debug1: channel 1: new [direct-tcpip]
    debug1: channel 1: free: direct-tcpip: listening port 8888 for myserver port 8888, connect from 127.0.0.1 port 1618, nchannels 2It looks not too bad to me, but unfortunately, jconsole runs into a timeout after about 2 mins.
    On the server I see the following using netstat:
    tcp        0    168 myserver:ssh    mywindowsbox:3381  VERBUNDEN  
    tcp        0      0 myserver:ssh    mywindowsbox:1317  VERBUNDEN  
    tcp        0      0 myserver:44625  myserver:8888   TIME_WAIT  
    tcp        0      0 *:8888                      *:*                         LISTENIt appears to me that the tomcat-server is listening correctly on port 8888 for all incoming hosts (although localhost should be enough).
    Furthermore, it seems that the ssh-tunnel has been establised.
    Why the hell, jconsole still can't connect?

    Hiya.
    JMX connections use two ports. You need the RMI Registry and the RMI Stub. This first one you bound to port 8888, but the other one is probably still bound to a random port. You need to be able to access that one through SSH as well.
    Trouble is that the second port uses a random port and most application servers can't statically configure this one. See this article for possible solutions (be sure to read the follow ups as well) : http://blogs.sun.com/jmxetc/entry/connecting_through_firewall_using_jmx
    Cheers,
    Hugp

  • Remote printing problem using ssh tunnel in Leopard

    Haho,
    I've recently installed Leopard, and I have unexpected difficulties with setting up remote printing to the printers of my University via ssh tunneling. The following procedure worked (and still works) under Tiger, but for some reason it doesn't work with Leopard (not just for me, but other friends also have the same issue as I do). The question is what could be the source of the problem and how could I get around it?
    So, I have the same short user name on my home Mac as my login name in the University system. Then, I set up the proper printers (IP printer, LPD protocol, Address: localhost, the appropriate queue and printer type etc.). Whenever I want to print from home to the University, I would open a Terminal window, and sudo ssh -L515:XXX.XXX.XXX.XXX:515 [email protected] . This is supposed to channel the printing which is sent to a localhost printer to the printers which can be reached through the University IP address.
    This method worked and works well under the latest version of Tiger, but not under Leopard (10.5, 9A581). I get no error messages, the printing seems to go through (at least no error seems to occur during spooling or logging in to the University with the terminal), but it simply doesn't prints out on the other end.
    I have no firewall or any other new network tools running which I'm aware of, and I'm not aware of any differences in the set-ups besides the change in the OS. The issue might be that of compatibility with the University printing system, but help in what exactly changed on the Mac side (something obviously did change) would help me a lot, especially since I don't think that the University technical crew would be very keen on (or competent in, for that matter) troubleshooting.
    Thanks in advance for your help!

    Had the same issue with MS Terminal Server printing over vpn tunnel.
    what kind of internet connection do you have? one which adds extra headers like pppoe ?
    for me ...
    sysopt connection tcpmss
    helped
    default is 1380 (1380 data + 20 TCP + 20 IP + 24 AH + 24 ESP_CIPHER + 12 ESP_AUTH + 20 IP = 1500 bytes)

  • SSH Tunnel to an Oracle SQL Server

    Hi all,
    I am attempting to set up an ssh tunnel from my local machine to an Oracle SQL server operating on a remote computer, and use it to run a perl script to extract things from that database.
    My question is, do I need to have an SQL client on the local machine for this to work? The remote computer does not have the Oracle DBD installed, while the local machine does (hence running the script on the local computer), but will the DBD hand of requests correctly through the ssh tunnel to the SQL server on the remote machine without a client on the local one?
    Thanks!

    The data access is all happening on the Oracle machine right? Then no, all your local machine needs is an ssh client - that's it. After that all processing is running on the server.

  • Using launchd to create "on demand" ssh tunnel

    Hello,
    I've setup 2 LaunchAgents in my ~/Library/LaunchAgents/ directory, in order to provide 2 apps with an ssh tunnel connectivity "on demand".
    One of the plist is like this :
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
    <key>Debug</key>
    <false/>
    <key>Disabled</key>
    <false/>
    <key>Label</key>
    <string>my.ssh.tunnel</string>
    <key>ProgramArguments</key>
    <array>
    <string>/usr/bin/ssh</string>
    <string>-l</string>
    <string>mylogin</string>
    <string>-N</string>
    <string>-L</string>
    <string>port:final-server:port</string>
    <string>mylogin@ssh-gateway</string>
    </array>
    <key>Sockets</key>
    <dict>
    <key>Listeners</key>
    <dict>
    <key>Bonjour</key>
    <false/>
    <key>SockServiceName</key>
    <string>port</string>
    <key>SockType</key>
    <string>stream</string>
    </dict>
    </dict>
    <key>StandardErrorPath</key>
    <string>/tmp/mytunnel.err</string>
    <key>StandardOutPath</key>
    <string>/tmp/mytunnel.out</string>
    <key>inetdCompatibility</key>
    <dict>
    <key>Wait</key>
    <false/>
    </dict>
    <key>onDemand</key>
    <true/>
    </dict>
    </plist>
    When I launch the application that makes a tcp request on localhost:port, the tunnel is created, this part is OK. But, the application is unable to use it. I have to quit and restart it so that it can use the ssh tunnel.
    Any idea why it behaves like this ? Any workaround ?
    PowerMac G5 2*2GHz   Mac OS X (10.4.6)  

    In fact, the idea of a wrapper script is not very appealing to me. The apps I launch use GUI. I could design an Applescript to "init" the tunnel then launch the true application, but I find it quite complicated and very unsatisfactory.
    Your telnet command succeed in activating the launchd item, but it returns nothing :
    $ echo "^]quit" | telnet localhost 1190
    Trying ::1...
    Connected to localhost.
    Escape character is '^]'.
    Connection closed by foreign host.
    $
    then, a `ps` shows the launchproxy process while it's opening the tunnel. This steps last for few seconds, the tunnel seems to be unavailable while launchproxy runs (in fact, launchproxy seems to run until the tunnel is fully established).
    The TCPKeepAlive option is not interesting in my context, I've monitored the ssh tunnel, once it's established, it won't close, even if the application supposed to be using it is not launched.
    I think my problem has no elegant solution. Such a solution could be for launchd/launchproxy to store the application queries, and to feed them into the tunnel once it is open. So, the app would just hang waiting for the tunnel to be fully established, and would get it's response after that. For now, the application hangs for ever. I have to force it to reissue it's network request so that it can reach the remote end of the tunnel.

  • Error making an ssh tunnel

    I'm getting an error trying to create an ssh tunnel.
    *ssh –L 10548:localhost:548 [email protected]*
    returns
    *ssh: Error resolving hostname \342\200\223L: nodename nor servname provided, or not known*
    normal ssh works ok so the problem is with localhost. This only happens on one of my computers. the other one connects fine using the same internet connection.
    P.S. I just checked and this only happens on one user account. the rest are fine.
    Message was edited by: V.K.
    this thread is the continuation of [this one|http://discussions.apple.com/thread.jspa?messageID=7218912#7218912].
    Message was edited by: V.K.

    Very strange. I wonder what \342\200\223L means. You can create a tunnel to the same [email protected] from another account on the same client Mac?
    The localhost parameter is actually sent to the server, i.e. it means that sshd should connect port 548 on localhost. What if you put "10548:localhost:548" in quotes? Or try "*ssh –L 10548:my.computer.at.work:548 [email protected]*". You could also try moving or renaming your local ~/.ssh folder to make sure there are no local user settings that are confusing things.

  • Qt applications over ssh tunnel: very slow redrawing

    Regularly I do not use many Qt applications, mostly Skype. I run it over ssh tunnel from another computer within the same local network for long time. After recent system update I noticed it became very slow refreshing its graphics. I checked several Gtk and Qt applications and found that Gtk ones work almost with the "native" speed, while Qt ones with that damn slow redrawing...
    I tried ssh with both "ForwardX11" and "ForwardX11Trusted" - there is no difference. I'm using no DE with xmonad WM (tried TWM - no difference either) in x86_64 box.
    Any directions/advices/ideas?
    Thanks!

    Regularly I do not use many Qt applications, mostly Skype. I run it over ssh tunnel from another computer within the same local network for long time. After recent system update I noticed it became very slow refreshing its graphics. I checked several Gtk and Qt applications and found that Gtk ones work almost with the "native" speed, while Qt ones with that damn slow redrawing...
    I tried ssh with both "ForwardX11" and "ForwardX11Trusted" - there is no difference. I'm using no DE with xmonad WM (tried TWM - no difference either) in x86_64 box.
    Any directions/advices/ideas?
    Thanks!

Maybe you are looking for