Network conditions: gigabit ethernet LAN between OS X client and OS X server. I see a scan of the home directory.
I found the culprit in the FileSyncAgent verbose log:
<Login> 1:: [13/05/03 13:57:17.186] -[SSHIPCClient handleStderrLineOrEOF:]: [2013-05-03 11:57:17 +0000] 'Pseudo-terminal will not be allocated because stdin is not a terminal.
<Login> 1:: [13/05/03 13:57:17.186] '
<Login> 1:: [13/05/03 13:57:25.860] -[SSHIPCClient handleStderrLineOrEOF:]: [2013-05-03 11:57:25 +0000] 'ssh: connect to host myserver.mydomain.com port 2336: Operation timed out
<Login> 1:: [13/05/03 13:57:25.860] '
<Login> 1:: [13/05/03 13:57:25.860] -[SSHIPCClient handleStderrLineOrEOF:]: SSH: 'ssh: connect to host myserver.mydomain.com port 2336: Operation timed out
<Login> 1:: [13/05/03 13:57:25.860] '
<Login> 1:: [13/05/03 13:57:25.861] -[SSHIPCClient handleStderrLineOrEOF:]: [2013-05-03 11:57:25 +0000] '(null)'
<Login> 1:: [13/05/03 13:57:25.865] +[SStore_FS newStore_FSForPeer:alias:] (Store-FS.m:325): unlink('/Users/userfoo/Library/Caches/Cleanup At Startup/FileSyncAgent-1025/.FileSync/Store-FS-PHD-network-home.filesyncstatetre e')
<Login> 1:: [13/05/03 13:57:25.865] unlink('/Users/userfoo/Library/Caches/Cleanup At Startup/FileSyncAgent-1025/.FileSync/Store-FS-PHD-network-home.filesyncstatetre e') failed (2)
<Login> 1:: [13/05/03 13:57:26.582] Download/expand of "/Volumes/Users/userfoo/.FileSync/Store-FS-PHD-network-home.filesyncstatetree.b z2" took 0.72 seconds
Checking with a port scan by Network Utility I found out that the PF firewall is blocking port 2336 when connected from the clients. From the server itself both 127.0.0.1 and the real IP address of the server accept incoming connections on port 2336 (which is what I had checked previously, but that was a mistake, 192.168.x.x. is routed to 127.0.0.1 I guess and thus not blocked).
Now I just have to find out how to open up port 2336 from the local IP range for clients.
And I'm wondering how much of a breach it would be to open up port 2336 in my router and forward it to the server. How safe is Apple's use of SSH here? Is it certificate protected?