ACS의 SSH 전달이 "관리상의 이유로 금지되었습니다"

Question

방금 ​​template을 사용하여 here으로 설명 된 단계에 따라 Azure Container Service에 새로운 Mesosphere Cluster를 만들었습니다. 클러스터/리소스가 생성되었고 ssh 전달을 통해 클러스터에 연결하기 만했습니다. 연결이 설정하지만 난 channel 2: open failed: administratively prohibited: open failed

를 얻을 수 80 전달 포트 페이지를 열 때 여기에 자세한 ssh 로그가되었습니다 :

sudo ssh -v -i ~/.ssh/id_rsa -L 80:localhost:80 -f -N  azureuser@myservermgmt.northeurope.cloudapp.azure.com -p 2200 
OpenSSH_6.9p1, LibreSSL 2.1.8 
debug1: Reading configuration data /etc/ssh/ssh_config 
debug1: /etc/ssh/ssh_config line 20: Applying options for * 
debug1: /etc/ssh/ssh_config line 102: Applying options for * 
debug1: Connecting to myservermgmt.northeurope.cloudapp.azure.com [52.178.215.121] port 2200. 
debug1: Connection established. 
debug1: permanently_set_uid: 0/0 
debug1: identity file /Users/me/.ssh/id_rsa type 1 
debug1: key_load_public: No such file or directory 
debug1: identity file /Users/me/.ssh/id_rsa-cert type -1 
debug1: Enabling compatibility mode for protocol 2.0 
debug1: Local version string SSH-2.0-OpenSSH_6.9 
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.2p2 Ubuntu-4ubuntu1 
debug1: match: OpenSSH_7.2p2 Ubuntu-4ubuntu1 pat OpenSSH* compat 0x04000000 
debug1: Authenticating to myservermgmt.northeurope.cloudapp.azure.com:2200 as 'azureuser' 
debug1: SSH2_MSG_KEXINIT sent 
debug1: SSH2_MSG_KEXINIT received 
debug1: kex: server->client chacha20-poly1305@openssh.com <implicit> none 
debug1: kex: client->server chacha20-poly1305@openssh.com <implicit> none 
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY 
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:ZMD6A/rz3qWsn2V6yQyeg3kG8vFtweDc72oAZCLo9xs 
debug1: Host '[myservermgmt.northeurope.cloudapp.azure.com]:2200' is known and matches the ECDSA host key. 
debug1: Found key in /var/root/.ssh/known_hosts:2 
debug1: SSH2_MSG_NEWKEYS sent 
debug1: expecting SSH2_MSG_NEWKEYS 
debug1: SSH2_MSG_NEWKEYS received 
debug1: SSH2_MSG_SERVICE_REQUEST sent 
debug1: SSH2_MSG_SERVICE_ACCEPT received 
debug1: Authentications that can continue: publickey,password 
debug1: Next authentication method: publickey 
debug1: Offering RSA public key: /Users/me/.ssh/id_rsa 
debug1: Server accepts key: pkalg ssh-rsa blen 279 
debug1: Authentication succeeded (publickey). 
Authenticated to myservicemgmt.northeurope.cloudapp.azure.com ([52.178.215.121]:2200). 
debug1: Local connections to LOCALHOST:80 forwarded to remote address localhost:80 
debug1: Local forwarding listening on ::1 port 80. 
debug1: channel 0: new [port listener] 
debug1: Local forwarding listening on 127.0.0.1 port 80. 
debug1: channel 1: new [port listener] 
debug1: Requesting no-more-sessions@openssh.com 
debug1: forking to background 
debug1: Entering interactive session. 
debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0 
debug1: Connection to port 80 forwarding to localhost port 80 requested. 
debug1: channel 2: new [direct-tcpip] 
channel 2: open failed: administratively prohibited: open failed 
debug1: channel 2: free: direct-tcpip: listening port 80 for localhost port 80, connect from 127.0.0.1 port 55718 to 127.0.0.1 port 80, nchannels 3 
debug1: Connection to port 80 forwarding to localhost port 80 requested. 

AFAIK이 PermitTunnel이 서버에서 사용할 수 없습니다 의미 할 수는. ssh 터널이 다른 목적을 위해 내 컴퓨터에서 작동하기 때문에 ACS에 구성해야 할 것이 있는지 궁금합니다. DCOS 마스터에 직접 ssh 시도했지만 성공하지 못했습니다.

도움을 주시면 감사하겠습니다.

Answer 1

AFAIK 이것은 서버에서 'PermitTunnel이 (가) 활성화되지 않았 음을 의미 할 수 있습니다.

아니요, 대상 서버의 /etc/ssh/sshd_config에서 AllowTcpForwarding입니다. 또는 PermitOpen 지시.

루트 권한으로 실행 중이 아니거나 특정 권한이없는 경우 시스템에서 권한있는 포트를 바인드 할 수 없습니다.