Okta Advanced Server Access Client on Linux Fails to Connect to Server Using Client Forward

An Okta Advanced Server Access (ASA) client connection failure occurs when the Linux distribution disables Transmission Control Protocol (TCP) forwarding by default. Enabling TCP forwarding in the gateway server configuration file resolves the issue. When using Client Forward through the ASA gateway, the ASA client on Linux fails to connect to the ASA target server, and Okta generates an error message.

error interacting with system keyring: couldn't open session: failed to open secretservice session: The name org.freedesktop.secrets was not provided by any .service files

CLI Action failed {"error": "error: connection error: desc = "transport: error while dialing: dial unix /var/run/sftd/client_trust_forwarding/<username>/OCiTmmqVsdfYrsCHkqjUPptwVQNcStxuhatCt.sock: connect:

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Advanced Server Access (ASA)
• SFT Client on Ubuntu
• ASA Gateway

This error occurs because some Linux distributions disable the AllowTcpForwarding setting by default.

How is the client connection failure resolved?

Enable Transmission Control Protocol (TCP) forwarding in the gateway server configuration file and restart the service by completing these steps.

1. Set AllowTcpForwarding to yes in the /etc/ssh/sshd_config file of the gateway server.
2. Restart the sshd service.