Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Honor public_addr in signup URL. #1643

Closed
russjones opened this issue Jan 31, 2018 · 1 comment
Closed

Honor public_addr in signup URL. #1643

russjones opened this issue Jan 31, 2018 · 1 comment
Assignees

Comments

@russjones
Copy link
Contributor

Problem

When adding a user like below, the signup address that Teleport returns has the hostname of the first proxy it finds: user_command.go#L117-L135

$ tctl users add --roles=admin rjones
Signup token has been created and is valid for 3600 seconds. Share this URL with the user:
https://proxy1.example.com:3080/web/newuser/00000000000000000000000000000000

NOTE: make sure 'proxy1.example.com' is accessible!
When the user 'rjones' activates their account, they will be assigned roles [admin]

This is a problem for HA situation as the proxy host my not be directly accessible (it may be behind a LB).

Proposed Solution

If public_addr is set, honor it here as the public address of the proxy.

@kontsevoy
Copy link
Contributor

kontsevoy commented Jan 31, 2018

Another proposed solution: maybe we should stop being too smart with our suggestions and simply print URL with <proxyhost> and say that "make sure points at Teleport proxy which users can access"

@kontsevoy kontsevoy added this to the 2.4.1 "Chicago" milestone Jan 31, 2018
@kontsevoy kontsevoy assigned russjones and unassigned kontsevoy Jan 31, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants