Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Title
d
Daniel Weeber
12/12/2021, 3:18 PMfleetctl login with SSO doesn't seem to work. As I do not get any error whatsoever... 😕 No clue where do look
It was working once yesterday, donno what happened. Login via Browser & SSO works w/o any problem
fleetctl config set --token <redacted> --email <redacted>
fleetctl config set --address https://<redacted>
fleetctl login
Log in using the standard Fleet credentials.
Email: (...)
Instead of being logged in directly
.fleet/config in userdir exists
root@admin:~# ls -la .fleet
total 12
drwx------ 2 root root 4096 Dec 12 15:53 .
drwx------ 32 root root 4096 Dec 12 15:53 ..
-rw------- 1 root root 253 Dec 12 15:53 config
root@admin:~#root@admin:~# cat .fleet/config
contexts:
default:
address: https://<redacted>
email: <redacted>
rootca: ""
tls-skip-verify: false
token: <redacted>
url-prefix: ""
root@admin:~#z
zwass
12/12/2021, 10:18 PMAh, you need to copy the token from the My Account page when you're using SSO. That token will expire when the session expires (default 4 hours, but configurable.
d
Daniel Weeber
12/12/2021, 10:41 PMYeah, I got the new token from the "My Account" page just right now. Not working 😞
I even logged out, logged back in and got the newly created token - same problem.
The token definitely changed
Even with --debug no error or similar is showing up
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.
Email:z
zwass
12/12/2021, 10:44 PMYou don't set the token with the login command: https://fleetdm.com/docs/using-fleet/fleetctl-cli#logging-in-with-saml-sso-authentication
d
Daniel Weeber
12/12/2021, 10:44 PMI did not say that I used the login command to set the token?
root@fleetdm:~# fleetctl config set --token <redacted>
[+] Set the token config key to "<redacted>" in the "default" context
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.z
zwass
12/12/2021, 10:46 PMOnce you set the token, can you try a command that will hit the server such as
fleetctl get configd
Daniel Weeber
12/12/2021, 10:46 PMWorking fine.. wow!
z
zwass
12/12/2021, 10:48 PMNice!
d
Daniel Weeber
12/12/2021, 10:50 PMShouldn't I be able to use the login command? Or maybe it should tell me "you dont need the login command, because you've setup a token"?