-
-
Notifications
You must be signed in to change notification settings - Fork 114
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Tickets #857
Comments
Could you please add |
|
log.txt |
That looks fine actually. Are you sure the ticket still exists on the Tickets admin page? Do tickets work for other targets, e.g. HTTP? Also try running Warpgate with |
Yes, the ticket is still there, as shown in the screenshot. Here are the logs with the connection. |
I've just tested with an http ticket and I've got the same thing, it asks for my login and password but once I'm in I can't access the resource. |
I also just tried to use a ticket for ssh, and then get promoted for an ssh login via password. So it seems like tickets are really not working I am on 0.7.3. Steps to recreate:
I also verified that the ticket is listed on the web ui. |
Interesting - the log says Could you please check the contents of the tickets table in warpgate's .sqlite database that's in /var/lib/warpgate? |
@Eugeny queried using: select * from tickets; |
Ohh this could be related to sea-orm not specifying NULL as field default for providers other than SQLite - I'll look into it |
It was actually due to older MySQL defaulting timestamp columns to "not null": https://dev.mysql.com/doc/refman/8.0/en/timestamp-initialization.html, fix incoming |
Fixed for new MySQL installations, but existing ones would need to be manually fixed with |
@Eugeny after running the sql statement the tickets work, but they are not removed after a single use. Is that correct behavior? |
Yes, the tickets are designed to work until removed from the UI. I'm planning to add UI support for expiry and use limits in the future |
thank you this works !! 😃 |
Hello,
I don't understand how the ticket system works, because when I create one with my user I get this message :
netwaze@MacBook-Pro ~ % ssh 'ticket-926a9522cdc85c7013410d27d957cd7b9f3025a266940ff454414e708ceac819@domain name' -p 2222 ticket-926a9522cdc85c7013410d27d957cd7b9f3025a266940ff454414e708ceac819@domain name's password: ticket-926a9522cdc85c7013410d27d957cd7b9f3025a266940ff454414e708ceac819@domain name: Permission denied (publickey,keyboard-interactive).
of course I've put the RSA key in my authorized_keys file and I've entered my user's password. Is there anything else I need to do for this to work?
thank you for your answer 🙂
The text was updated successfully, but these errors were encountered: