Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File Upload/Download fails in the Web UI with insecure-drop mode set for host user creation #41417

Open
pschisa opened this issue May 10, 2024 · 1 comment
Assignees
Labels
bug c-bg Internal Customer Reference c-clb Internal Customer Reference server-access sftp Issues related to Teleport's SFTP implementation ssh

Comments

@pschisa
Copy link
Contributor

pschisa commented May 10, 2024

Expected behavior:
File uploads/downloads will succeed when using the insecure-drop host user creation drop mode to existing directories (like /tmp)

Current behavior:
File upload/downloads fail to existing directories like /tmp when using the insecure-drop mode.
Screenshot 2024-05-10 at 12 44 44 PM (3)

Logs from downloading/uploading to/from an existing /tmp directory

May 10 16:39:11 Test-Cluster-Node2-US-East-Grafana teleport[30587]: 2024-05-10T16:39:11Z DEBU [SUBSYSTEM] starting SFTP process regular/sftp.go:125
May 10 16:39:11 Test-Cluster-Node2-US-East-Grafana teleport[30587]: Could not set shell's cwd to home directory "/home/idontexisthere", defaulting to "/"
May 10 16:39:11 Test-Cluster-Node2-US-East-Grafana teleport[30587]: ERROR: stat /home/idontexisthere: no such file or directory
May 10 16:39:11 Test-Cluster-Node2-US-East-Grafana teleport[30587]: 2024-05-10T16:39:11Z DEBU [SUBSYSTEM] SFTP process finished regular/sftp.go:197

Bug details:

  • Teleport version: v15
  • Recreation steps: Attempt to use the Web UI file upload/download function to an existing directory after logging in as a non-existent user with insecure-drop mode set
@pschisa pschisa added bug ssh server-access c-bg Internal Customer Reference labels May 10, 2024
@zmb3 zmb3 added the sftp Issues related to Teleport's SFTP implementation label May 10, 2024
@pschisa pschisa added the c-clb Internal Customer Reference label May 13, 2024
@pschisa
Copy link
Contributor Author

pschisa commented May 13, 2024

Seems like this also impacts tsh scp operations as well

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug c-bg Internal Customer Reference c-clb Internal Customer Reference server-access sftp Issues related to Teleport's SFTP implementation ssh
Projects
None yet
Development

No branches or pull requests

3 participants