StephenC.92115 (Customer) asked a question.
Does Okta allow the ControlMaster option in openssh?
I am trying to use the ControlMaster option to speed up connections through a jump host. I added to Host* in .ssh./config:
ControlMaster auto
ControlPath ~/.ssh/master-%r@%h:%p
When I connect to a jump server scajump01) offering 2FA using Duo I see the control socket and using scajump01 as a jump host works as expected.
ssh -J scajump01 ol8okta01d
However, when I try to duplicate this behavior on a second server (scajump02) offering Okta I can logon but do see the control socket and cannot use it as a jump host. Is this correct behavior for Okta?
Hello, @StephenC.92115 (Customer)
In this scenario i would recommend you to use the ProxyCommand
you can check the following documentation.
https://help.okta.com/asa/en-us/Content/Topics/Adv_Server_Access/docs/setup/ssh.htm
Vicente
Okta, Inc
That works after a fashion. It also seem to work if I copy the state.json file from one client to another.