ssh -W requires that the gateway support port forwarding, which is probably disabled if its enforcing interactive logins. (-W also implicitly sets -T, though I

ssh -W requires that the gateway support port forwarding, which is probably disabled if its enforcing interactive logins. (-W also implicitly sets -T, though I don't know if that would fail the login or not.) Likewise, -J is shorthand for a ProxyCommand that runs nc on the gateway, which also won't work if the gateway requires interactive (i.e. TTY interposed) logins. (EDIT: Looking at the OpenSSH source code, -J is shorthand for generating a ProxyCommand using ssh -W. Either it was refactored to use -W after -W was added, or I'm misremembering how -J used to work.)