netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
11.11k stars 512 forks source link

can't connect #1388

Open omarbenzekri opened 11 months ago

omarbenzekri commented 11 months ago

Hi I have an issue when click on connect from app client, after logging to my email it shows to message to authorize (only the first time) then it shows login successful,but nothing happens in the app. running Windows 11 X64.

What i have tried : Add an inbound rule for netbird program(allow all). I have tried using the command line "netbird up" and this is the output :


C:\Windows\System32>netbird up -F --log-level debug 2023-12-14T11:21:03+01:00 DEBG client/internal/login.go:93: connecting to the Management service https://api.wiretrustee.com:443 2023-12-14T11:21:03+01:00 DEBG client/internal/login.go:63: connected to the Management service https://api.wiretrustee.com:443 2023-12-14T11:21:04+01:00 DEBG client/internal/login.go:72: peer registration required 2023-12-14T11:21:04+01:00 DEBG client/internal/pkce_auth.go:55: connecting to Management Service https://api.wiretrustee.com:443 2023-12-14T11:21:04+01:00 DEBG client/internal/pkce_auth.go:61: connected to the Management service https://api.wiretrustee.com:443 Please do the SSO login in your browser. If your browser didn't open automatically, use this URL to log in:

https://login.netbird.io/authorize?audience=https%3A%2F%2Fapp.wiretrustee.com%2F&client_id=x3KvnKHEDY2j3b0n0wLq4eu8SiPDKq6o&code_challenge=jwfRSIiFj6LTWyKagVlnvN8R3cauYcFU1Wc3IVhjxhg&code_challenge_method=S256&redirect_uri=http%3A%2F%2Flocalhost%3A53000%2F&response_type=code&scope=openid+profile+email+offline_access+api+email_verified&state=508488a72510b6c5dc27b3a745527abc9338b3c50f93d334

2023-12-14T11:21:08+01:00 DEBG client/internal/login.go:93: connecting to the Management service https://api.wiretrustee.com:443 2023-12-14T11:21:08+01:00 DEBG client/internal/login.go:63: connected to the Management service https://api.wiretrustee.com:443 2023-12-14T11:21:09+01:00 DEBG client/internal/login.go:72: peer registration required 2023-12-14T11:21:09+01:00 DEBG client/internal/login.go:122: sending peer registration request to Management Service 2023-12-14T11:21:09+01:00 ERRO client/internal/login.go:126: failed registering peer rpc error: code = PermissionDenied desc = can't login,00000000-0000-0000-0000-000000000000 2023-12-14T11:21:09+01:00 INFO client/internal/connect.go:47: starting NetBird client version 0.24.4 2023-12-14T11:21:09+01:00 DEBG client/internal/connect.go:102: connecting to the Management service api.wiretrustee.com:443 2023-12-14T11:21:09+01:00 DEBG client/internal/connect.go:110: connected to the Management service api.wiretrustee.com:443 2023-12-14T11:21:09+01:00 DEBG client/internal/connect.go:121: rpc error: code = PermissionDenied desc = peer login has expired, please log in once more 2023-12-14T11:21:09+01:00 DEBG client/internal/connect.go:208: exiting client retry loop due to unrecoverable error: rpc error: code = PermissionDenied desc = peer login has expired, please log in once more Error: rpc error: code = PermissionDenied desc = peer login has expired, please log in once more


NetBird status -d output:


Daemon status: NeedsLogin

Run UP command to log in with SSO (interactive login):

netbird up

If you are running a self-hosted version and no SSO provider has been configured in your Management Server, you can use a setup-key:

netbird up --management-url --setup-key

More info: https://docs.netbird.io/how-to/register-machines-using-setup-keys


thank you

mlsmaycon commented 11 months ago

Hello @omarbenzekri can you restart the agent with the following command and try again via regular powershell session:

Admin session powershell

netbird service restart

Regular session powershell

netbird up
omarbenzekri commented 11 months ago

it didn't work. on powershell after "netbird up" no error returned but on APP still not connecting. and on web site still i can't see my machine in the list of peers. what port is listening to?

Albert321123321 commented 9 months ago

Hi @omarbenzekri I faced the same problem. I deleted the peer with login error and login again. That works for me.

VMax4 commented 7 months ago

Hi, i had a similar issue, login was expired and i don't know why, but Netbird icons in Desktop and system tray were deleted so to re-login i had to do it from terminal with "netbird down - netbird up", this worked but i'm without icons yet... Does anyone knows what could has been happened?

VMax4 commented 7 months ago

I answer to myself, it happened that netbird ui at login expiration had been uninstalled (but why???) so i had to reinstall netbird from scratch, all this in Windows 11

mrbluecoat commented 6 months ago

I have a similar connection problem. I created a reusable Setup Key for unlimited clients and a 365 day expiration, then used it to connect an OpenWrt server just fine. I then tried to connect a Ubuntu x86_64 desktop machine and got this error:

$ curl -fsSL https://pkgs.netbird.io/install.sh | sh
Installation has been finished.
$ netbird login --setup-key C566D8D5-CBC9-4339-86BB-REDACTED
error: login failed: rpc error: code = PermissionDenied desc = peer login has expired, please log in once more

I tried with sudo and got the same error. I did netbird up and used the provided URL and the web page said it worked:

image

However, in my Netbird dashboard it doesn't show up and the terminal says Error: waiting sso login failed with: rpc error: code = PermissionDenied desc = can't login

$ netbird status
Daemon status: NeedsLogin
$ cat /etc/os-release 
PRETTY_NAME="Ubuntu 22.04.4 LTS"

Update: upgrading to Ubuntu 24.04 fixed it for me.

kukat commented 3 months ago

+1 for macos

❯ netbird up -k *****
Error: login failed: rpc error: code = PermissionDenied desc = peer login has expired, please log in once more
❯ netbird version
0.28.7
mlsmaycon commented 3 months ago

@kukat it seems like you've previously authenticated using user credentials. you need to either remove the peer and add it again with a setup-key or reauthenticate with the same user from before.

mlsmaycon commented 3 months ago

@mrbluecoat, the issue happened because you attempted to log in using a different user from when the peer was registered.