How do I use xinetd to forward port 22 for SSH connections to Stash
The content on this page relates to platforms which are not supported. Consequently, Atlassian Support cannot guarantee providing any support for it. Please be aware that this material is provided for your information only and using it is done so at your own risk.
Purpose
By default, Stash listens for SSH connections on port 7999, this guide will help forward port 22 so that SSH operations can be accessed at ssh://git@stash.mycompany.com/PROJECT/repo.git instead of ssh://git@stash.mycompany.com:7999/PROJECT/repo.git. The default sshd service will need to be moved to an alternative port other than 22.
This is an alternative to using HAProxy as described in Setting up SSH port forwarding.
Solution
Single IP Address Available
- Using the package manager for your distribution (
apt-get,yum, orrpm), installxinetd Create a configuration file named
stash_sshunder/etc/xinetd.dwith the following contentservice stash_ssh { disable = no type = UNLISTED socket_type = stream protocol = tcp user = nobody wait = no redirect = 127.0.0.1 7999 port = 22 }- Restart
xinetdwith/etc/init.d/xinetd restart - Once port forwarding is set up, you will need to configure the SSH base URL in Stash so that the clone urls presented in Stash indicate the correct host and port to clone from. See the SSH base URL section in Enabling SSH access to Git repositories in Stash.
Multiple IP Addresses Available
This option is available if more than one IP address is available on the server. sshd_config will need to be modified so that it listens to only one of the IP addresses.
- Using the package manager for your distribution (
apt-get,yum, orrpm), installxinetd Create a configuration file named
stash_sshunder/etc/xinetd.dwith the following contentservice stash_ssh { disable = no type = UNLISTED socket_type = stream protocol = tcp user = nobody wait = no redirect = 127.0.0.1 7999 bind = 192.168.1.11 port = 22 }Modify
/etc/ssh/sshd_configso that it will only bind to one of the IP addresses (different from whatxinetdis listening on/etc/ssh/sshd_config# Package generated configuration file # See the sshd_config(5) manpage for details # What ports, IPs and protocols we listen for Port 22 # Use these options to restrict which interfaces/protocols sshd will bind to #ListenAddress :: ListenAddress 192.168.1.10 ListenAddress 127.0.0.1 Protocol 2 # HostKeys for protocol version 2 HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_dsa_key- Restart
xinetdwith/etc/init.d/xinetd restart - Restart
sshdwithservice sshd restart - Once port forwarding is set up, you will need to configure the SSH base URL in Stash so that the clone urls presented in Stash indicate the correct host and port to clone from. See the SSH base URL section in Enabling SSH access to Git repositories in Stash.