Does ssh tunnel require tun/tap driver in kernel? [solved]

[turtles]

Does a ssh tunnel require tun/tap driver in kernel?
Thanks
(Trying to set up a non root ssh tunnel)
_________________
Donate to Gentoo

[Hu]

It would be easier for you to try what you want and report back than for you to ask us, since there are several ways the question could be interpreted. You might be asking about simple ssh port forwarding, which never requires kernel support, but does respect usual port listener rules. You could be asking about the ad hoc VPN support based on the TUN/TAP device, which requires both kernel support and permission to access it. Such permission is normally available only to root, although root can grant unprivileged users access to a TUN/TAP device. You could be using tunnel in one of the less common ways, such as referring to tunneling an ssh connection through an intermediate host to get to the desired endpoint.

[turtles]

Sorry for being vague hu.

I am trying to work remotely on a postgress DB
http://www.postgresql.org/docs/8.2/static/ssh-tunnels.html
I run the command:

[imaginasys]

Are you getting the second log when you try to connect with plsql ? with the command "psql -h localhost -p 3333 postgres" ???

The first part show that you have succeded your connection between your machine to the posgress DB server.

The second part show that you cannot authenticate to the postgress server. You seems to be logging as "root@xxxxxx.com", is root a legal user for the postgress DB ?
You need to use a legal postgress user to log. And the ssh server need to be on the same machine that the postgress DB server.

Just my 0,02$,

Regards,
BT

[turtles]

[mike155]

You definitely don't need tun/tap devices for 'ssh -L 3333:XXXXXXXXX.com:5432 XXXXXXXXXX.com'. You need tun/tap devices if you want to run a virtual machine on your server.

Look at ' /etc/ssh/sshd_config' on XXXXXXXXXX.com: 'AllowTcpForwarding' must be set to 'yes'.

Most probably, your SSH command should be 'ssh -L 3333:127.0.0.1:5432 XXXXXXXXXX.com' if your PostgreSQL database runs on XXXXXXXXXX.com. This depends
on the configuration of your PostgreSQL database server.

[turtles]

[mike155]

The important message is 'channel 2: open failed: administratively prohibited: open failed'. Please look at the SSH daemon config on your PostgreSQL Server, especially the parameter AllowTcpForwarding. Most probably, port forwarding is not allowed - and in this case you get exactly this message.

I cannot say anything about the messages containing 'tun' or 'tunnel'. I don't see those messages on my systems.

[turtles]