Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't SSH to agentless nodes from Web UI #24922

Closed
nklaassen opened this issue Apr 20, 2023 · 0 comments · Fixed by #24935
Closed

Can't SSH to agentless nodes from Web UI #24922

nklaassen opened this issue Apr 20, 2023 · 0 comments · Fixed by #24935
Assignees
Labels
agentless bug test-plan-problem Issues which have been surfaced by running the manual release test plan

Comments

@nklaassen
Copy link
Contributor

Expected behavior:
I can SSH to an agentless node from the web UI

Current behavior:
I only see this message in the Web UI:

disconnected
this request can be only executed by a proxy

Using tsh or openssh from the terminal is working.

Bug details:

2023-04-20T10:59:08-07:00 DEBU [WEB]       Attempting to issue a single-use user certificate with an MFA check. web/terminal.go:500
2023-04-20T10:59:08-07:00 WARN [WEBSOCKET] Unable to stream terminal - failed to dial host. error:[
ERROR REPORT:
Original Error: *trace.AccessDeniedError this request can be only executed by a proxy
Stack Trace:
        github.com/gravitational/teleport/api@v0.0.0/client/client.go:865 github.com/gravitational/teleport/api/client.(*Client).GenerateOpenSSHCert
        github.com/gravitational/teleport/lib/agentless/agentless.go:79 github.com/gravitational/teleport/lib/agentless.createAuthSigner
        github.com/gravitational/teleport/lib/agentless/agentless.go:51 github.com/gravitational/teleport/lib/agentless.SignerFromSSHCertificate.func1
        github.com/gravitational/teleport/lib/proxy/router.go:280 github.com/gravitational/teleport/lib/proxy.(*Router).DialHost
        github.com/gravitational/teleport/lib/web/terminal.go:766 github.com/gravitational/teleport/lib/web.(*TerminalHandler).connectToNode
        github.com/gravitational/teleport/lib/web/terminal.go:679 github.com/gravitational/teleport/lib/web.(*TerminalHandler).connectToHost.func2
        runtime/asm_amd64.s:1598 runtime.goexit
User Message: this request can be only executed by a proxy] session_id:662378d1-b625-46df-8470-c76ec339e486 web/terminal.go:768

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
agentless bug test-plan-problem Issues which have been surfaced by running the manual release test plan
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants