scp between 2 servers - invoked at 3rd server

Shell Programming and Scripting
1

I have a couple of servers that can't see each other and need to copy files from one to the other. I try to invoke scp from a 3rd server that can see both servers - get error msgs that are cryptic.

from server C
I can do
scp user@serverA:~/file .
scp file user@serverB:~

but if I try to do:
scp user@serverA:~/file user@serverB:~
I get prompted for password on Server A, but then fail with permission denied on serverB

I captured the verbose output of this last command, but cannot see why it does not prompt me for the password on ServerB

$> scp -v ctsjsie@fxlddb01:~/xxx.lst ctsjsie@hstas05:~
Executing: /usr/local/bin/ssh -v -x -o'ClearAllForwardings yes' -n -l ctsjsie fxlddb01 scp -v ~/xxx.lst 'ctsjsie@hstas05:~'
OpenSSH_3.7.1p2-pwexp26, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Applying options for *
debug1: /usr/local/etc/ssh_config line 42: Deprecated option "FallBackToRsh"
debug1: Connecting to fxlddb01 [167.113.228.23] port 22.
debug1: Connection established.
debug1: identity file /home/ctsjsie/.ssh/identity type -1
debug1: identity file /home/ctsjsie/.ssh/id_rsa type -1
debug1: identity file /home/ctsjsie/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.7.1p2-pwexp26
debug1: match: OpenSSH_3.7.1p2-pwexp26 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2-pwexp26
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'fxlddb01' is known and matches the RSA host key.
debug1: Found key in /home/ctsjsie/.ssh/known_hosts:4
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/ctsjsie/.ssh/identity
debug1: Trying private key: /home/ctsjsie/.ssh/id_rsa
debug1: Offering public key: /home/ctsjsie/.ssh/id_dsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: password
ctsjsie@fxlddb01's password:
debug1: Authentication succeeded (password).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Sending command: scp -v /home/ctsjsie/xxx.lst ctsjsie@hstas05:~
Executing: program /usr/local/bin/ssh host hstas05, user ctsjsie, command scp -v -t ~
OpenSSH_3.7.1p2-pwexp26, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Applying options for *
debug1: /usr/local/etc/ssh_config line 42: Deprecated option "FallBackToRsh"
debug1: Connecting to hstas05 [172.19.69.123] port 22.
debug1: Connection established.
debug1: identity file /export/home/ctsjsie/.ssh/identity type -1
debug1: identity file /export/home/ctsjsie/.ssh/id_rsa type -1
debug1: identity file /export/home/ctsjsie/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.7.1p2-pwexp26
debug1: match: OpenSSH_3.7.1p2-pwexp26 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2-pwexp26
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'hstas05' is known and matches the RSA host key.
debug1: Found key in /export/home/ctsjsie/.ssh/known_hosts:13
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /export/home/ctsjsie/.ssh/identity
debug1: Trying private key: /export/home/ctsjsie/.ssh/id_rsa
debug1: Trying private key: /export/home/ctsjsie/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: password
debug1: Authentications that can continue: publickey,password,keyboard-interactive
Permission denied, please try again.
debug1: Authentications that can continue: publickey,password,keyboard-interactive
Permission denied, please try again.
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: No more authentication methods to try.
Permission denied (publickey,password,keyboard-interactive).
debug1: Calling cleanup 0x4001fb12(0x0)
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
lost connection
debug1: channel 0: free: client-session, nchannels 1
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 5.6 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0
debug1: Exit status 1

2

Your trying to go from server C with one command thru server A and get a file from B all at the same time. Why don't you just log in A with SSH. The do an scp from A to B and see if that works.

Also, It looks like your sshd_config file excepts keys or passwords so there shouldn't be any issue there.

-X

3

Thanks X,

Unfortunately, as I indicated A & B cannot see each other. Both of these servers are located outside of our firewall at 2 different sites. Server C is located inside the firewall on our internal network and CAN see both server A & Server B - I was hoping to copy files from A to B by way of C in a "single hop" - Beginning to look like I can't do it this way......