[Feature Request] "over ssh" is not respecting ssh config

[peh]

As a user i would like my ~/.ssh/config File to be respected when using the "over ssh" option.

Having a more sophisticated SSH configuration with e.g. a bastion host that is used to proxy connections is more or less best practice in todays cloud setups.
It would be great if TablePlus would support such things.
I understand that due to Apples Sandbox we would have to select the config file manually which is perfectly fine in my eyes!

It's basically the last feature missing for me to buy a License!

[huyphams]

Hey @peh, thanks for your feedback. I'm an ssh-config user. I use it every day with more than 20 servers and it saves a lot of time for me. Lets me see if I can do it.

[peh]

any progress? for now i am stuck with an ssh tunnel but it would be great to have the app doing everything for.

PS: i still bought the app it's to awesome to not pay for it!

[huyphams]

Some users have requested this feature too, so I moved it to work in progress. You will see it soon 😄

[mkarnicki]

Lovely, great that it's work-in-progress now. I would definitely like to use a host name from my ssh-config instead of providing server IP (which is not very human friendly).

Does the "Import private key" actually import/copy the key file somewhere or just saves the key file path? The "import" is a bit confusing. I think the following would be clearer:
"[Choose | Select] private key file [path]"

Actually, if the "Over SSH -> Server" is not an IP (but a host from ssh-config), it would be sweeet if TablePlus took the IdentityFile path from the SSH config file, based on the host name. But that's an extra feature ;). PSequel allows for host name (instead of IP), but you still have to provide identity file path manually.

Hope this helps. Just purchased TablePlus, looking forward to making great use of it :).

[huyphams]

Hey @peh @mkarnicki it respects ssh/config now:
Download (this is a build with production mode): https://www.dropbox.com/s/3orqil53ktk8yzk/TablePlus.zip?dl=0

[mkarnicki]

@huyphams (I removed my previous comment, chose the wrong host).

I confirm this works GREAT! Thank you, I'm excited about TablePlus :)!

[huyphams]

Yup, I need to make this form more clear because you don't need to specify the username, password or the server port.
P/s: There is an annoying bug in 10.11, the white background in textfield, it gave me cancer 😄:

[davidolrik]

I think I have found one minor bug, when disconnecting and reconnecting the ssh connection the database connection is not reconnected.

[huyphams]

Thanks @davidolrik, but is it hang or something?

[mkarnicki]

I can't confirm that, seems all is working well. @davidolrik please try to be as detailed as you can in your follow up comment, thanks.

[davidolrik]

Yes it hangs, the timer in the bottom left just keeps counting away.

It also happens if I leave the window open, and don't use it for extended periods of time.

[huyphams]

hey, thanks for your helpful information.
We have two options:

1. Auto-reconnect: stick on => TablePlus will try to reconnect if the connection failed in the background.
2. Keeps connection alive: TablePlus sends a ping to sever to keep the connection alive.

If the connection failed while you sending a query, TablePlus also tries to reconnect first.

Seems TablePlus got trouble with ssh, everything is hanging because it waiting too long for ssh-timeout.

[davidolrik]

I think I know what the problem is.

The MySQL I'm connecting to is configured to aggressively close connections if they aren't used.
I think the cut-of-is set at around 10 seconds.

So the bug must be in the statement executer, that fails to notice that the connection has gone bad.

[davidolrik]

I have both of those options turned on.

[huyphams]

That's too bad, I set the ping is 30 seconds 🤣probably I will put a config here, then users can set their period.

[davidolrik]

I don't have this problem in Sequel Pro, maybe they are pinging the connection before executing the query.

[huyphams]

Sequel Pro uses sshd for tunneling see here, it's handled automatically by OS, and probably they sent ping more frequency.
Btw, I got the bug, will fix it in next update.

Thank you so much.

[davidolrik]

I found a different solution.

Immediately upon connecting, I execute set session wait_timeout=3600; which will let the ping work as intended. (This is specifically for MySQL)

[theflow]

It's not respecting the ssh/config for me. Is there any way to see some debug output of the connection attempt?

[huyphams]

Hey can you share me the screenshot of your connection config (Please blur the sensitive information)? this is mine with ssh/config.

[theflow]

yeah, I saw the comments earlier, mine looks the same. Are you actually parsing the ssh/config or relying on a library that uses it? Anything that could be wrong in the .ssh/config format? (it works with ssh)

[huyphams]

I used the official API from libssh to handle the config. This is my ssh config.

Host tinydev
HostName <the host ip>
User root

The location of the config is ~/.ssh/config.

[nifoc]

I think I'm running into the same problem.

.ssh/config

Host mysite.io
  HostName IP_HERE
  User daniel
  Port 20022
  ForwardAgent yes
  PreferredAuthentications publickey
  IdentitiesOnly yes
  IdentityFile ~/.ssh/mysite

TablePlus (no manual IdentityFile)

Clicking "Connect" does "nothing". It doesn't connect and simply runs into a timeout (I think).
Is there any way to debug the TablePlus SSH connection?
Running ssh mysite.io in a terminal works without any issues,

---

Update: Setting "Server" to the IP and manually selecting the correct IdentityFile seems to work.

[zyqxd]

Anyone still having trouble with connecting over ssh? This is my config, using build 98

Host bastion_staging
  Hostname host
  Port 22
  User dzhang
  ProxyCommand none
  ForwardAgent yes
  UseKeychain yes
  IdentitiesOnly yes
  IdentityFile ~/.ssh/identity

[huyphams]

Hey looks like TablePlus can't handle identity let me check.

[zyqxd]

@huyphams is there any work arounds? I tried explicitly importing an identity, still no dice.

[huyphams]

I'm trying with the IdentityFile, I will report you asap.

[2b]

Hello.

I have same problem. Build 100 from Setapp. Connection works only when I write username and manually choose ssh key.

[2b]

I've completely emptied ~/.ssh/config, to make sure that problem isn't in additional ssh-parametres or spaces-markup, so I just added next 3 rows to ~/.ssh/config:

Host localhost
Hostname 127.0.0.1
User root

And result was the same.

[zyqxd]

@huyphams I believe my issue is actually related to #344

[huyphams]

Hey, @itsdeezy thanks for pointing it out. We have a release tomorrow, because of time constraints so I can't ship this bugfix in that release 101.
We can expect that it will be fixed (or supported) in build 102 (next week).

[huyphams]

Hi @itsdeezy I have implemented keyboard interactive support in this build: https://www.dropbox.com/s/fghht69ib70jdpn/TablePlus.zip?dl=0
Can you give it a try?

[zyqxd]

hey @huyphams,
tried out build 103, seems like 2fa is getting to where it asks for my login on my phone. However, it's stuck at the Connecting to database... stage.

Any way I can run this in verbose? maybe a console mode so I can give you some logs?

[huyphams]

Unfortunately, I turned off the logger on production. There is no two-factor authentication in SSH. It's keyboard-interactive. The two-factor authentication is a method that server sends a question to the client and verify the connection by keyboard-interactive support after connecting.
I have tested with my setup and it works, probably there are some edge cases that I missed.
Thanks for the report, I will try to reproduce it.

[sfdye]

Does Tableplus supports these two ssh config options?

   AddKeysToAgent yes
   UseKeychain yes   

I can't get it to work on 2.8.2 (256) 😞

[christoph-kluge]

Since I stumbled across this ticket first and I've still tried to figure out why it's not working. I thought it might be useful to add some references to the other tickets here.

If you use Include-statements then this could be a potential reason. This seems to be not implemented yet. Here are the referencing tickets #608 and #775

[mpyw]

This comment helped me:
#2531 (comment)