<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
SSH to ASA Server Displays a Warning: "Error forwarding client trust, proceeding anyway"
Advanced Server Access
Overview

The Forward Client Trust feature has been enabled on a project, but it is not working, and the following warning is displayed when connecting to the first target server:

 

WARNING: Error forwarding client trust, proceeding anyway: 'ssh: streamlocal-forward@openssh.com request denied by peer'

 

Applies To
  • Advanced Server Access (ASA)
  • Forward Client Trust
Cause

The target server's SSH configuration does not allow TCP forwarding. For most systems, TCP forwarding is allowed by default.

Solution
  1. SSH into the target server.
  2. Check if the AllowTcpForwarding setting is set to "no".
    # sudo sshd -T | grep -i allowtcpforwarding
    allowtcpforwarding no
    
  3. Backup the sshd configuration file (/etc/ssh/sshd_config).
  4. Modify the sshd configuration file, replacing the line "AllowTcpForwarding no" with "AllowTcpForwarding yes".
    AllowTcpForwarding yes
  5. Verify the sshd configuration.
    # sudo sshd -t
    1. No output means that the configuration is valid. Proceeding with an invalid configuration can cause loss of SSH access.
  6. Restart sshd.
    # sudo systemctl restart sshd
  7. Verify that TCP Forwarding is now allowed.
    # sshd -T | grep -i allowtcpforwarding
    allowtcpforwarding yes
Loading
SSH to ASA Server Displays a Warning: "Error forwarding client trust, proceeding anyway"