Issues setting up Application Access [answered]

[jdmedeiros]

Start a private window, login and go to applications.
Click on application and it opens a new tab, working perfectly.
Go back to the main application tab, click anywhere and this is what happens:
https://imgur.com/lG27Ij2

The string did not match the expected pattern.

The apps config section:

  apps:
    -
      name: certsrv1
      uri: "http://vpn.dev.blabla.com"
      public_addr: "vpn.dev.blabla.com"
      labels:
        env: normal

Tomorrow at the end of the day I will be presenting Teleport to my colleagues. Hopefully will be able to overcome this with your help. Thanks in advance.

[benarent]

Hi @jdmedeiros , this error is showing up on the servers page. Which version of Teleport are you using and can you share your role please.

[jdmedeiros]

Roles: https://pastebin.com/WGp0TAej

teleport version

Teleport v6.0.2 git:v6.0.2-0-g1cb1420b7 go1.15.5

Thanks!

[jdmedeiros]

Using the admin role.

[benarent]

Can you add a new user with sudo tctl users add teleport-admin --roles=editor,access --logins=root,ubuntu,ec2-user

[jdmedeiros]

Did this and when I went to the webpage there was a few more thing there, specifically roles and users, which was nice.

[root@vpn ejbca]# tctl users add teleport-admin --roles=editor,access --logins=root,ubuntu,ec2-user
User "teleport-admin" has been created but requires a password. Share this URL with the user to complete user setup, link is valid for 1h:
https://vpn.dev.blabla.com:3080/web/invite/xxxxxxxxxx

NOTE: Make sure vpn.dev.blabla.com:3080 points at a Teleport proxy which users can access.
[root@vpn ejbca]# systemctl stop teleport
[root@vpn ejbca]# rm -fr /var/lib/teleport/
[root@vpn ejbca]# systemctl start teleport
[root@vpn ejbca]# 

However, it did not work. As long as I do not run an app everything works. As soon as I run an app, the only thing that works are the apps. Every other option gives this error "Unexpected token < in JSON at position 0" in a red bar and does not show the relevant information. This error occurs regardless of app_service being enabled or no. I am going to reinstall in the next hour, so if you need anything else for debugging do let me know. Thank you.

app_service:
  enabled: no
  debug_app: true
  apps:
    -
      name: certserver
      uri: "http://vpn.dev.blabla.com"
      public_addr: "vpn.dev.blabla.com"
      labels:
        env: normal
    -
      name: certadmin
      uri: "https://localhost"
      public_addr: "vpn.dev.blabla.com"
      labels:
      env: superadmin
      insecure_skip_verify: true

[benarent]

Umm, the indenting looks a little off. Can you get the debug app to work? Did you also setup a DNS Record for https://*.vpn.dev.blabla.com?

app_service:
  enabled: yes
+  debug_app: true

I would recommend starting a fresh and trying our new Getting started guide. https://goteleport.com/docs/getting-started/

[jdmedeiros]

Ground zero... thank you for your time @benarent

[benarent]

Were you able to get this to work?

[jdmedeiros]

Thank @benarent for following up. Yes I got it working, but was able to reproduce the error message even with the new install. It is related to the fact the is instance has 2 NICs, routing activated and, very important, the *.blabla.com was just being resolved on the outside, not on the inside. I have pretty much sorted out and was able to demo it successfully. Some of the docs I was using were older and I had not realized that; for example, only after your message I started having Teleport answering on port 443; before, I had to go to port 3080. I have only scratched the surface and still have a lot to learn, but definitely an awesome product. Thanks again.