Originally assigned to: @oschwartz10612 on GitHub.
Describe the Bug
I tested the new web based SSH acces as public ressource in Pangolin 1.19.1 Enterprise.
Basically it works very well - but only for members of the Admin role.
If you define a custom role extra for SSH access or extend the default Member group with SSH access rights you got a „sshErrorSignKeyFailed: Request failed with status code 403“ error after opening the ressource.
Environment
OS Type & Version: Docker
Pangolin Version: 1.19.1
Edition (Community or Enterprise): Enterprise
Gerbil Version: 1.4.1
Traefik Version: current 3.6
Newt Version: 1.13
Client Version: none
To Reproduce
Tested with custom role only for SSH access or the default Member group with adding SSH access rights.
Tested with local user and auto provisioned OIDC user (in my case Authelia) with default Member role assigned - it does not work.
The local user assigned to the Admin role or the OIDC auto provisioned user assigned to the Admin role can access the public ressource via SSH in browser without any problem.
Expected Behavior
Web based SSH Access should open for users with custom role for SSH access rights assigned only or when extending the default Member group with SSH access rights.
Originally created by @daniel-san05 on GitHub (Jun 12, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/3256
Originally assigned to: @oschwartz10612 on GitHub.
### Describe the Bug
I tested the new web based SSH acces as public ressource in Pangolin 1.19.1 Enterprise.
Basically it works very well - but only for members of the Admin role.
If you define a custom role extra for SSH access or extend the default Member group with SSH access rights you got a „sshErrorSignKeyFailed: Request failed with status code 403“ error after opening the ressource.
### Environment
- OS Type & Version: Docker
- Pangolin Version: 1.19.1
- Edition (Community or Enterprise): Enterprise
- Gerbil Version: 1.4.1
- Traefik Version: current 3.6
- Newt Version: 1.13
- Client Version: none
### To Reproduce
Tested with custom role only for SSH access or the default Member group with adding SSH access rights.
Tested with local user and auto provisioned OIDC user (in my case Authelia) with default Member role assigned - it does not work.
The local user assigned to the Admin role or the OIDC auto provisioned user assigned to the Admin role can access the public ressource via SSH in browser without any problem.
### Expected Behavior
Web based SSH Access should open for users with custom role for SSH access rights assigned only or when extending the default Member group with SSH access rights.
@oschwartz10612 commented on GitHub (Jun 12, 2026):
Are you running the latest badger? If the migration updated the config for you could you restart traefik to make sure it pulls the latest badger? It should be v1.4.1
<!-- gh-comment-id:4694222398 -->
@oschwartz10612 commented on GitHub (Jun 12, 2026):
Are you running the latest badger? If the migration updated the config for you could you restart traefik to make sure it pulls the latest badger? It should be `v1.4.1`
Made a Docker Compose down and up -d a second time. Problem persists.
For my Admin role user I can see the newt logs for adding the user to the sudo group and creating the Home directory. For the user of the Member group no newt logs are generated at all so far.
Regards,
Daniel
<!-- gh-comment-id:4695246146 -->
@daniel-san05 commented on GitHub (Jun 12, 2026):
Yes, here is the unformatted snippet of my traefik_config.yml:
experimental:
plugins:
badger:
moduleName: github.com/fosrl/badger
version: v1.4.1
Made a Docker Compose down and up -d a second time. Problem persists.
For my Admin role user I can see the newt logs for adding the user to the sudo group and creating the Home directory. For the user of the Member group no newt logs are generated at all so far.
Regards,
Daniel
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @daniel-san05 on GitHub (Jun 12, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/3256
Originally assigned to: @oschwartz10612 on GitHub.
Describe the Bug
I tested the new web based SSH acces as public ressource in Pangolin 1.19.1 Enterprise.
Basically it works very well - but only for members of the Admin role.
If you define a custom role extra for SSH access or extend the default Member group with SSH access rights you got a „sshErrorSignKeyFailed: Request failed with status code 403“ error after opening the ressource.
Environment
To Reproduce
Tested with custom role only for SSH access or the default Member group with adding SSH access rights.
Tested with local user and auto provisioned OIDC user (in my case Authelia) with default Member role assigned - it does not work.
The local user assigned to the Admin role or the OIDC auto provisioned user assigned to the Admin role can access the public ressource via SSH in browser without any problem.
Expected Behavior
Web based SSH Access should open for users with custom role for SSH access rights assigned only or when extending the default Member group with SSH access rights.
@oschwartz10612 commented on GitHub (Jun 12, 2026):
👀
@oschwartz10612 commented on GitHub (Jun 12, 2026):
Are you running the latest badger? If the migration updated the config for you could you restart traefik to make sure it pulls the latest badger? It should be
v1.4.1@daniel-san05 commented on GitHub (Jun 12, 2026):
Yes, here is the unformatted snippet of my traefik_config.yml:
experimental:
plugins:
badger:
moduleName: github.com/fosrl/badger
version: v1.4.1
Made a Docker Compose down and up -d a second time. Problem persists.
For my Admin role user I can see the newt logs for adding the user to the sudo group and creating the Home directory. For the user of the Member group no newt logs are generated at all so far.
Regards,
Daniel
@oschwartz10612 commented on GitHub (Jun 12, 2026):
Issue identified will be fixed in the next patch today