fleetctl login with SSO doesn't seem to work. As I...
# fleetd
Daniel Weeber
12/12/2021, 3:18 PMfleetctl login with SSO doesn't seem to work. As I do not get any error whatsoever... 😕 No clue where do look
It was working once yesterday, donno what happened. Login via Browser & SSO works w/o any problem
Copy code
fleetctl config set --token <redacted> --email <redacted>
fleetctl config set --address https://<redacted>
fleetctl login
Log in using the standard Fleet credentials.
Email: (...)
Instead of being logged in directly
.fleet/config in userdir exists
root@admin:~# ls -la .fleet
total 12
drwx------ 2 root root 4096 Dec 12 15:53 .
drwx------ 32 root root 4096 Dec 12 15:53 ..
-rw------- 1 root root 253 Dec 12 15:53 config
root@admin:~# Copy code
root@admin:~# cat .fleet/config
contexts:
default:
address: https://<redacted>
email: <redacted>
rootca: ""
tls-skip-verify: false
token: <redacted>
url-prefix: ""
root@admin:~#z
zwass
12/12/2021, 10:18 PM
Ah, you need to copy the token from the My Account page when you're using SSO. That token will expire when the session expires (default 4 hours, but configurable.
d
Daniel Weeber
12/12/2021, 10:41 PMYeah, I got the new token from the "My Account" page just right now. Not working 😞
Daniel Weeber
12/12/2021, 10:42 PMI even logged out, logged back in and got the newly created token - same problem.
The token definitely changed
Daniel Weeber
12/12/2021, 10:43 PMEven with --debug no error or similar is showing up
Copy code
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.
Email:z
zwass
12/12/2021, 10:44 PM
You don't set the token with the login command: https://fleetdm.com/docs/using-fleet/fleetctl-cli#logging-in-with-saml-sso-authentication
d
Daniel Weeber
12/12/2021, 10:44 PMI did not say that I used the login command to set the token?
Daniel Weeber
12/12/2021, 10:45 PM Copy code
root@fleetdm:~# fleetctl config set --token <redacted>
[+] Set the token config key to "<redacted>" in the "default" context
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.z
zwass
12/12/2021, 10:46 PM
Once you set the token, can you try a command that will hit the server such as
fleetctl get configd
Daniel Weeber
12/12/2021, 10:46 PMWorking fine.. wow!
z
zwass
12/12/2021, 10:48 PM
Nice!
d
Daniel Weeber
12/12/2021, 10:50 PMShouldn't I be able to use the login command? Or maybe it should tell me "you dont need the login command, because you've setup a token"?
7 Views