Authentication Passthrough Is not enabled

Technical Support
,
1

Note - If you do not fill in every section below, your post won’t be answered - you must provide the steps you have followed so far and the actions you’ve already taken. Make sure to remove this notice from your post too.

Screenshots of text are prohibited. Always copy and paste text as text.

Make sure you search before posting! Duplicate posts for the same issue may not be answered.

OS Name/Version: Ubuntu Server 20.04

Virtualization: Proxmox VM

Product Name/Version: AMP Release “Phobos” v2.6.1.6

Problem Description: Amp controller is unable to auth for only one target server.

Steps to reproduce:

  • Step 1 - install amp as a controller
  • Step 2 - install amp as a target
  • Step 3 - link to controller
  • Step 4 - convert standalone instance to target (2)
  • Step 5 - Link

Actions taken to resolve so far: Reinstall AMP for controller, re set up target #2. Re auth through CLI.

I cannot access inside the instances, but i can get to a page showing a different looking login screen with my branding on it. Whenever login is tried the text " Authentication System

Failure (code 100)

Reason: The auth server at http://localhost:8080/ is configured not to allow other instances to authenticate through it."

I can access instances on another target just fine.

2

After converting the standalone instance you need to run:
ampinstmgr repairauth target http(s)://the.controllers.web.interface

3

I tried it again, and still no luck. I also ran it for the controller in case but still no luck.

Command I ran, with the URL replaced with local IP

ampinstmgr repairauth target http://192.168.50.133:8080

I was looking through what amp was telling me and noticed it was attempting to auth with localhost, and that would make sense if the instance was running on the controller. However it is run on the target. I tried turning on AuthPassthrough on the target to see what happened and it stopped throwing that error, though my login still did not work.

I manually went into the config file for the instance I was attempting to log into in the first place, and low and behold the auth url was still localhost:8080. I changed it to my controller and now it works like advertised.

I dont know if this is my bad use of the CLI or if AMP needs to have this fixed but it works

TL:DR Edit the config file and change is auth server to the controller

4

ampinstmgr repairauth does precisely that for any pre-existing instances, did you remember to run it as the amp Linux user?