[GH-ISSUE #3092] Private Resource - SSH error: Unauthorized #19398

Open
opened 2026-05-21 20:26:06 -05:00 by GiteaMirror · 4 comments
Owner

Originally created by @jelly8perplexed on GitHub (May 16, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/3092

Describe the Bug

I have almost all of my private resources configured with external auth daemon. These resources have worked via ssh in previous releases of panoglin, but I get the following error now:

% pangolin ssh paper.lab
unexpected status code 404: 404 page not found
SSH error: Unauthorized

I have gone through my setup script again and confirmed that the systemd service is running. The SSH config is still accurate as per the KB article. Network has not changed either as I can ping the hosts from the cli host.

Environment

  • OS Type & Version: MacOS Tahoe 26.5
  • Pangolin Version: 18.4
  • Gerbil Version: 1.3.1
  • Traefik Version: 3.6.14
  • Newt Version: 12.5
  • cli Version: 0.8.2
  • VPN version: 0.8.1

To Reproduce

As far as I can tell, connection to any private resource via certificate authentication are failing to connect to resources running behind a newt connector.

a.mo.@AMos-MacBook-Air ~ % pangolin ssh music.lab
unexpected status code 404: 404 page not found
SSH error: Unauthorized

Expected Behavior

In the past, this has logged in via authenticated user that has access to the resource. Confirmed that the current user has access, so the user p-smash0573 should be logged into the ssh resource. This does not happen.

Originally created by @jelly8perplexed on GitHub (May 16, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/3092 ### Describe the Bug I have almost all of my private resources configured with external auth daemon. These resources have worked via ssh in previous releases of panoglin, but I get the following error now: % pangolin ssh paper.lab unexpected status code 404: 404 page not found SSH error: Unauthorized I have gone through my setup script again and confirmed that the systemd service is running. The SSH config is still accurate as per the KB article. Network has not changed either as I can ping the hosts from the cli host. ### Environment - OS Type & Version: MacOS Tahoe 26.5 - Pangolin Version: 18.4 - Gerbil Version: 1.3.1 - Traefik Version: 3.6.14 - Newt Version: 12.5 - cli Version: 0.8.2 - VPN version: 0.8.1 ### To Reproduce As far as I can tell, connection to any private resource via certificate authentication are failing to connect to resources running behind a newt connector. a.mo.@AMos-MacBook-Air ~ % pangolin ssh music.lab unexpected status code 404: 404 page not found SSH error: Unauthorized ### Expected Behavior In the past, this has logged in via authenticated user that has access to the resource. Confirmed that the current user has access, so the user p-smash0573 should be logged into the ssh resource. This does not happen.
Author
Owner

@AstralDestiny commented on GitHub (May 17, 2026):

Throw pangolin into LOG_LEVEL: DEBUG and down and up and also throw traefik into trace logging and gerbil into debugging as per the first part again, Just want to make sure requests are going to the places they need.

where's newt and what did you define as the path and did you set the newt to have the same preshared key for the auth daemon? If using on site you need to use the pangolin client or bare host newt. if using container for on site it won't function.

<!-- gh-comment-id:4468643779 --> @AstralDestiny commented on GitHub (May 17, 2026): Throw pangolin into LOG_LEVEL: DEBUG and down and up and also throw traefik into trace logging and gerbil into debugging as per the first part again, Just want to make sure requests are going to the places they need. where's newt and what did you define as the path and did you set the newt to have the same preshared key for the auth daemon? If using on site you need to use the pangolin client or bare host newt. if using container for on site it won't function.
Author
Owner

@jelly8perplexed commented on GitHub (May 18, 2026):

Ok - I will change the debugging hopefully today and re-test. Where can I look in the logs for the results? I also tested with the latest windows version and got the same error.

I am hosting a newt site from my proxmox host in a dedicated VM. It is a bare host; no containers used. As mentioned this had been working in prior versions with no changes to newt or the auth daemons since installation.

<!-- gh-comment-id:4480038337 --> @jelly8perplexed commented on GitHub (May 18, 2026): Ok - I will change the debugging hopefully today and re-test. Where can I look in the logs for the results? I also tested with the latest windows version and got the same error. I am hosting a newt site from my proxmox host in a dedicated VM. It is a bare host; no containers used. As mentioned this had been working in prior versions with no changes to newt or the auth daemons since installation.
Author
Owner

@oschwartz10612 commented on GitHub (May 20, 2026):

Yeah this sounds like Traefik is not serving the Pangolin ui or something like that. Does the dashboard work when you visit it? If it does, could you log out of the cli and back in?

<!-- gh-comment-id:4503438343 --> @oschwartz10612 commented on GitHub (May 20, 2026): Yeah this sounds like Traefik is not serving the Pangolin ui or something like that. Does the dashboard work when you visit it? If it does, could you log out of the cli and back in?
Author
Owner

@jelly8perplexed commented on GitHub (May 21, 2026):

I can get to both the pangolin dashboard and traefik dashboards, I don't see any warnings or errors there. I have yet to change the logging metrics...

<!-- gh-comment-id:4504386021 --> @jelly8perplexed commented on GitHub (May 21, 2026): I can get to both the pangolin dashboard and traefik dashboards, I don't see any warnings or errors there. I have yet to change the logging metrics...
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#19398