[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

problems tunneling svn+ssh

From: Steven Op de beeck <annika_at_ulyssis.org>
Date: 2003-11-02 12:56:36 CET

Hi,

I'm having some problems tunneling svn+ssh.

 From "http://subversion.tigris.org/project_faq.html#paranoid"
I got this:
% ssh -L 8888:svn-server.example.com:80 me@ssh-server.example.com
% svn checkout http://localhost:8888/repos/ours

So I thought this would work for svn+ssh too.

Here's a drawing of the situation.

                         ____________> PORT_FORWARD >___________
                        | |
                        | |
SOMEWHERE <---------> MERCURY <-------||NAT+FIREWALL|------> FURY
svn client (external) (internal)
                                                         ssh-daemon
                                                         svn server

On FURY:

$ ssh -R 2223:localhost:22 -l steven MERCURY -gN

On SOMEWHERE:

$ssh -p 2223 MERCURY
This works perfectly, so the ssh-tunnel is functioning.

Then, still on SOMEWHERE:

$ svn co svn+ssh://mercury:2223/usr/local/repos/mume
The authenticity of host 'mercury (x.x.x.x)' can't be established.
RSA key fingerprint is 73:37:11:6c:a7:2f:23:12:08:e6:c1:ad:9f:ba:11:89.
[...]
bash: line 1: svnserve: command not found
svn: Network connection closed unexpectedly
svn: Connection closed unexpectedly

After deleting the key from known_hosts:
$ ssh MERCURY
RSA key fingerprint is 73:37:11:6c:a7:2f:23:12:08:e6:c1:ad:9f:ba:11:89.

You can see the RSA fingerprints are the same, so it seems to me that
"svn+ssh://mercury:2223/usr/local/repos/mume" doesn't use the 2223 port
(but the default 22)

To confirm this, the remote host, FURY, has this fingerprint:

$ ssh -p 2223 404.be
[...]
RSA key fingerprint is 79:f8:47:c7:00:96:f0:dd:0e:a8:fa:f5:40:d5:54:47.

------------
To conclude,
Unlike the http example above, svn doesn't seem to use the specified
port in svn+ssh://mercury:2223/usr/local/repos/mume
Is this a bug? Or wasn't it intended to be used like this?

I hope my problem is clear, does anyone know a solution?

tia,
Steven.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Sun Nov 2 12:57:31 2003

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.