SQL Server

Connect to an SSH Server Through Another (Jump Host)

Demonstrates the Chilkat Ssh.ConnectThroughSsh method, which connects to a second SSH server through an already connected and authenticated Ssh object. The first argument is the first (jump-host) Ssh object, and the second and third are the destination hostname and port.

Background: This is SSH chaining through a "jump host" (bastion): the application connects to a reachable gateway, then tunnels onward to a target that is only accessible from inside the network. Each hop is authenticated separately with its own credentials. The result is a normal Ssh object for the target that happens to be routed through the first connection.

Chilkat SQL Server Downloads

Download Chilkat for SQL Server

SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    --  Demonstrates the Ssh.ConnectThroughSsh method, which connects to a second SSH server through
    --  an already connected and authenticated Ssh object (a jump host).  The 1st argument is the
    --  first Ssh object, and the 2nd and 3rd are the destination hostname and port.

    DECLARE @sshJump int
    EXEC @hr = sp_OACreate 'Chilkat.Ssh', @sshJump OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    --  Connect and authenticate to the first SSH server (the jump host).
    DECLARE @sshPort int
    SELECT @sshPort = 22
    EXEC sp_OAMethod @sshJump, 'Connect', @success OUT, 'jump.example.com', @sshPort
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @sshJump, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @sshJump
        RETURN
      END

    --  Normally you would not hard-code the password in source.  You should instead obtain it
    --  from an interactive prompt, environment variable, or a secrets vault.
    DECLARE @password nvarchar(4000)
    SELECT @password = 'mySshPassword'

    EXEC sp_OAMethod @sshJump, 'AuthenticatePw', @success OUT, 'jumpUser', @password
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @sshJump, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @sshJump
        RETURN
      END

    --  Connect to the target SSH server through the jump host.
    DECLARE @sshTarget int
    EXEC @hr = sp_OACreate 'Chilkat.Ssh', @sshTarget OUT

    EXEC sp_OAMethod @sshTarget, 'ConnectThroughSsh', @success OUT, @sshJump, 'target.example.com', @sshPort
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @sshTarget, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @sshJump
        EXEC @hr = sp_OADestroy @sshTarget
        RETURN
      END

    --  Authenticate to the target server (separate credentials).
    EXEC sp_OAMethod @sshTarget, 'AuthenticatePw', @success OUT, 'targetUser', @password
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @sshTarget, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @sshJump
        EXEC @hr = sp_OADestroy @sshTarget
        RETURN
      END

    PRINT 'Connected to the target through the jump host.'

    EXEC sp_OAMethod @sshTarget, 'Disconnect', NULL
    EXEC sp_OAMethod @sshJump, 'Disconnect', NULL

    EXEC @hr = sp_OADestroy @sshJump
    EXEC @hr = sp_OADestroy @sshTarget


END
GO