"Test SCP server connection" fails with error message "shell request failed on channel 0"
4415
Created On 02/15/24 18:03 PM - Last Modified 08/30/24 21:25 PM
Symptom
- Configure Scheduled Config Export.
- Once configured, test the connection to the SCP server using the Test SCP server connection.
- Popup error message is displayed "shell request failed on channel 0" and the test fails.
Environment
- Any Panorama
- PAN-OS 10.2.x
- Scheduled Config Export
Cause
The SCP Server does not support the Shell connection requested by client (Panorama).
Resolution
- Use the server that supports the shell requests. One example is OpenSSH.
- The error "shell request failed on channel 0" indicates that there's no shell or remote command access available on the server.
- When the server doesn't implement/support shell requests, the request fails and error message is displayed.
Additional Information
- There's a difference between the scheduled config export execution and the "Test scp server connection".
- The "test scp server connection" tries to access the shell and execute commands to create a new file.
debug1: Executing command: "c:\\windows\\system32\\cmd.exe" /c "echo paloaltonetworks > \\/Conf\\/ssh\\-export\\-test\\.txt" with no pty
- The scheduled config export uploads a tgz file.
debug1: Executing command: "c:\\windows\\system32\\cmd.exe" /c ""C:\\Windows\\System32\\OpenSSH\\scp.exe" -t /Conf/PAN-01_20240206.tgz" with no pty