Unable to ssh with tailscale #459

Closed
opened 2025-12-29 01:29:40 +01:00 by adam · 5 comments
Owner

Originally created by @Frankzhang854 on GitHub (Mar 31, 2023).

Please ask, I have enabled tailscale ssh on one of the headscale clients, and headscale is also configured with ACL. I don’t know why it still prompts Permission denied (tailscale)

acls:
  - action: accept
    src:
      - "frank"
    dst:
      - "*:*"
      - "frankxin:*"
  - action: accept
    src:
      - "frankxin"
    dst:
      - "frankxin:*"
ssh:
  - action: check
    src:
      - "frank"
    dst:
      - "*:*"
      - "frankxin:*"
    user:
      - "some-allowlisted-user"
    checkPeriod: 8h
  - action: check
    src:
      - "frankxin"
    dst:
      - "*:*"
      - "frank:*"
    user:
      - "some-allowlisted-user"
    checkPeriod: 8h
disableIPv4: false
randomizeClientPort: false

Version of headscale used: v0.21.0
Version of tailscale client: 1.38.2
OS (e.g. Linux, Mac, Cygwin, WSL, etc.) and version: macOS Ventura

Originally created by @Frankzhang854 on GitHub (Mar 31, 2023). Please ask, I have enabled tailscale ssh on one of the headscale clients, and headscale is also configured with ACL. I don’t know why it still prompts Permission denied (tailscale) ``` acls: - action: accept src: - "frank" dst: - "*:*" - "frankxin:*" - action: accept src: - "frankxin" dst: - "frankxin:*" ssh: - action: check src: - "frank" dst: - "*:*" - "frankxin:*" user: - "some-allowlisted-user" checkPeriod: 8h - action: check src: - "frankxin" dst: - "*:*" - "frank:*" user: - "some-allowlisted-user" checkPeriod: 8h disableIPv4: false randomizeClientPort: false ``` Version of headscale used: v0.21.0 Version of tailscale client: 1.38.2 OS (e.g. Linux, Mac, Cygwin, WSL, etc.) and version: macOS Ventura
adam added the stalebug labels 2025-12-29 01:29:40 +01:00
adam closed this issue 2025-12-29 01:29:40 +01:00
Author
Owner

@loprima-l commented on GitHub (Apr 28, 2023):

Hi, I don't think that Headscale supports the ssh like Tailscale now, just use ACLs and normal ssh login should work. Let me know !

@loprima-l commented on GitHub (Apr 28, 2023): Hi, I don't think that Headscale supports the ssh like Tailscale now, just use ACLs and normal ssh login should work. Let me know !
Author
Owner

@mattcen commented on GitHub (Jun 15, 2023):

This is related to #661 :)

@mattcen commented on GitHub (Jun 15, 2023): This is related to #661 :)
Author
Owner

@kradalby commented on GitHub (Jun 19, 2023):

@Frankzhang854 can you try the code in #1487?

@kradalby commented on GitHub (Jun 19, 2023): @Frankzhang854 can you try the code in #1487?
Author
Owner

@github-actions[bot] commented on GitHub (Dec 20, 2023):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Dec 20, 2023): This issue is stale because it has been open for 90 days with no activity.
Author
Owner

@github-actions[bot] commented on GitHub (Dec 27, 2023):

This issue was closed because it has been inactive for 14 days since being marked as stale.

@github-actions[bot] commented on GitHub (Dec 27, 2023): This issue was closed because it has been inactive for 14 days since being marked as stale.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#459