{"action":"created","issue":{"url":"https://api.github.com/repos/gravitational/teleport/issues/894","repository_url":"https://api.github.com/repos/gravitational/teleport","labels_url":"https://api.github.com/repos/gravitational/teleport/issues/894/labels{/name}","comments_url":"https://api.github.com/repos/gravitational/teleport/issues/894/comments","events_url":"https://api.github.com/repos/gravitational/teleport/issues/894/events","html_url":"https://github.com/gravitational/teleport/issues/894","id":219127993,"number":894,"title":"Unable to connect to cluster host using tsh, but web works","user":{"login":"ekristen","id":48329,"avatar_url":"https://avatars3.githubusercontent.com/u/48329?v=3","gravatar_id":"","url":"https://api.github.com/users/ekristen","html_url":"https://github.com/ekristen","followers_url":"https://api.github.com/users/ekristen/followers","following_url":"https://api.github.com/users/ekristen/following{/other_user}","gists_url":"https://api.github.com/users/ekristen/gists{/gist_id}","starred_url":"https://api.github.com/users/ekristen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ekristen/subscriptions","organizations_url":"https://api.github.com/users/ekristen/orgs","repos_url":"https://api.github.com/users/ekristen/repos","events_url":"https://api.github.com/users/ekristen/events{/privacy}","received_events_url":"https://api.github.com/users/ekristen/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-04-04T03:01:42Z","updated_at":"2017-04-04T17:38:51Z","closed_at":"2017-04-04T17:38:51Z","body":"I am unable to connect to a remote cluster behind a FW using tsh, but using the web interface on the main proxy works just fine. \r\n```\r\nINFO[0000] no teleport login given. defaulting to ekristen  file=client/api.go:315 func=client.NewClient\r\nINFO[0000] [KEY AGENT] Conneced to System Agent: \"/private/tmp/com.apple.launchd.FHyGwcxRml/Listeners\"  file=client/api.go:1156 func=client.connectToSSHAgent\r\nDEBU[0000] [KEYSTORE] Returning certificate \"/Users/ekristen/.tsh/keys/main-proxy.private.io/ekristen.cert\" valid until \"2017-04-04 05:18:43 -0600 MDT\"  file=client/keystore.go:187 func=client.(*FSLocalKeyStore).GetKey\r\nINFO[0000] [KEY AGENT] Loading 1 keys for \"ekristen\"     file=client/keyagent.go:68 func=client.NewLocalAgent\r\nINFO[0000] [CLIENT] connecting proxy=main-proxy.private.io:3023 login='aether' method=0  file=client/api.go:899 func=client.(*TeleportClient).ConnectToProxy\r\nDEBU[0000] [KEY AGENT] got 3 known hosts                 file=client/keyagent.go:210 func=client.(*LocalKeyAgent).CheckHostSignature\r\nDEBU[0000] [KEY AGENT] verified host main-proxy.private.io:3023  file=client/keyagent.go:244 func=client.(*LocalKeyAgent).CheckHostSignature\r\nINFO[0000] [CLIENT] successful auth with proxy main-proxy.private.io:3023  file=client/api.go:909 func=client.(*TeleportClient).ConnectToProxy\r\nDEBU[0000] [CLIENT] found clusters: [{\"name\":\"main-cluster\",\"lastconnected\":\"2017-04-04T03:00:11.464863321Z\",\"status\":\"online\"},{\"name\":\"main-cluster\",\"lastconnected\":\"2017-04-04T03:00:09.881228777Z\",\"status\":\"online\"}]  file=client/client.go:94 func=client.(*ProxyClient).GetSites\r\nINFO[0000] [CLIENT] client= connecting to node=fw-cluster-host-001:0@default@remote-cluster  file=client/client.go:174 func=client.(*ProxyClient).ConnectToNode\r\nDEBU[0001] [KEY AGENT] got 3 known hosts                 file=client/keyagent.go:210 func=client.(*LocalKeyAgent).CheckHostSignature\r\nDEBU[0001] [KEY AGENT] verified host fw-cluster-host-001:0@default@remote-cluster  file=client/keyagent.go:244 func=client.(*LocalKeyAgent).CheckHostSignature\r\n\r\nERROR REPORT:\r\nOriginal Error: *errors.errorString access denied to root connecting to fw-cluster-host-001\r\nStack Trace:\r\n\t/Users/rjones/Development/go/src/github.com/gravitational/teleport/lib/client/client.go:237 github.com/gravitational/teleport/lib/client.(*ProxyClient).ConnectToNode\r\n\t/Users/rjones/Development/go/src/github.com/gravitational/teleport/lib/client/api.go:432 github.com/gravitational/teleport/lib/client.(*TeleportClient).SSH\r\n\t/Users/rjones/Development/go/src/github.com/gravitational/teleport/tool/tsh/common/tsh.go:303 github.com/gravitational/teleport/tool/tsh/common.onSSH\r\n\t/Users/rjones/Development/go/src/github.com/gravitational/teleport/tool/tsh/common/tsh.go:178 github.com/gravitational/teleport/tool/tsh/common.Run\r\n\t/Users/rjones/Development/go/src/github.com/gravitational/teleport/tool/tsh/main.go:29 main.main\r\n\t/usr/local/go/src/runtime/proc.go:192 runtime.main\r\n\t/usr/local/go/src/runtime/asm_amd64.s:2087 runtime.goexit\r\nUser Message: access denied to admin connecting to fw-cluster-host-001\r\n```"},"comment":{"url":"https://api.github.com/repos/gravitational/teleport/issues/comments/291575956","html_url":"https://github.com/gravitational/teleport/issues/894#issuecomment-291575956","issue_url":"https://api.github.com/repos/gravitational/teleport/issues/894","id":291575956,"user":{"login":"ekristen","id":48329,"avatar_url":"https://avatars3.githubusercontent.com/u/48329?v=3","gravatar_id":"","url":"https://api.github.com/users/ekristen","html_url":"https://github.com/ekristen","followers_url":"https://api.github.com/users/ekristen/followers","following_url":"https://api.github.com/users/ekristen/following{/other_user}","gists_url":"https://api.github.com/users/ekristen/gists{/gist_id}","starred_url":"https://api.github.com/users/ekristen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ekristen/subscriptions","organizations_url":"https://api.github.com/users/ekristen/orgs","repos_url":"https://api.github.com/users/ekristen/repos","events_url":"https://api.github.com/users/ekristen/events{/privacy}","received_events_url":"https://api.github.com/users/ekristen/received_events","type":"User","site_admin":false},"created_at":"2017-04-04T17:38:51Z","updated_at":"2017-04-04T17:38:51Z","body":"I'll close for now, I'll re-open if it happens again. "}}
{"actor":{"display_login":"ekristen"}}