Re: unable to tunnel CA through ssh tunnel (SOLVED)

[Andre Charbonneau <Andre.Charbonneau@ssc-spc.gc.ca>]

After playing a bit with the SSH tunnel and EPICS_CA_NAME_SERVERS, it
seems that it works fine when I use 'localhost' as opposed to my
system's IP address.

For example, my SSH tunnel is created as follows:

    ssh -N my.epics.server -L 5064:localhost:5064

Then I set the following environment for EPICS:

EPICS_CA_AUTO_ADDR_LIST=NO
EPICS_HOST_ARCH=linux-x86
EPICS_CA_ADDR_LIST=
EPICS_CA_NAME_SERVERS=localhost:5064


Then it seems that with the above configuration, the ca_test command
happily uses the SSH tunnel to query my EPICS server.


    Andre

On 13-01-28 09:22 AM, Andre Charbonneau wrote:
> Greetings everyone,
>
> I'm trying to do something rather simple but can't seem to get it to work.
>
> What I'm trying to do is the have my CA client to connect a CA server
> via a SSH tunnel.  The CA client is running on a Windows system, and the
> SSH tunnel is created using Putty.
>
> Creating the SSH tunnel for port 5064 between the server and client,
> using PUTTY, seems to work fine.
>
> Then I set my Windows environment to have the following (as documented
> at http://www.aps.anl.gov/epics/base/R3-14/12-docs/CAref.html#Environmen):
>
> EPICS_CA_NAME_SERVERS=<localhost_ip_address>:5064
> EPICS_CA_ADDR_LIST=
> EPICS_CA_AUTO_ADDR_LIST=NO
>
> Then when I try to access one of my PVs using the CA client, I get the
> following error message:
>
>>      C:\program files\EPICS Windows Tools>caget motorController:TestBox_1:C1
>>      CA.Client.Exception...............................................
>>          Warning: "Empty PV search address list"
>>          Source File: ..\udpiiu.cpp line 359
>>          Current Time: Fri Jan 25 2013 16:30:15.057180376
>>      ..................................................................
>>      Channel connect timed out: 'motorController:TestBox_1:C1' not found.
> At this point I'm not sure if any traffic is actually going through the
> SSH tunnel or not. :-|
>
> Is a second tunnel for port 5065 also required?
>
>
> Anyone managed to get a similar setup working?
>
> Any information about this would be much appreciated.
>
> Thanks,
>   Andre


-- 
André Charbonneau
Research Computing Support Analyst
Shared Services Canada | National Research Council Canada
Services partagés Canada | Conseil national de recherches Canada
100 Sussex Drive | 100, promenade Sussex 
Ottawa, Ontario  K1A 0R6
Canada
Andre.Charbonneau@SSC-SPC.gc.ca
Telephone | Téléphone:  613-993-3129