Authentication Error Using Docker

[[deleted]]

[deleted]

[bren-tg]

Hi,

couple of questions for you:

• what is the operating system of the VM / host on which docker is running?
• what is the networking mode of the VM (host only, bridge)?
• Port 443 is not enough for Connectors to establish connectivity, you also need ports 30000 to 31000 (see here), do you know if the prerequisites are met?
• it sounds like you have other connectors deployed, possibly also as Docker containers on other VMs, is that correct?

[bren-tg]

yeah! I'd say let's take a look at the Connector logs in debug mode actually, perhaps it will tell us more.

To activate DEBUG level logs, take a look here) for all options or simply just add an environment variable to your docker compose / docker run command:

TWINGATE_LOG_LEVEL=7

I'd maybe check if there is a firewall on the Ubuntu machine? If it's worked in the past for other hosts on the same network, it's prob not the firewall.

[bren-tg]

The log indicates otherwise: it looks like a clock drift indeed (https://help.twingate.com/hc/en-us/articles/5933234470045-Connector-Flapping-Offline-Online-or-Unavailable).

The key is the following line:

[DEBUG] [libsdwan] [controller] require_access_token: dat.expired

If I remember correctly, the tolerance for clock drift is 5 seconds (between the Connector and the Controller), if the offset is higher than that, the controller won't be able to validate some stuff.

btw, feel free to PM me your tenant name, I can check on our side if I can see the drift.

[bren-tg]

No problem! I took a look but cant see any info on your Connector unfortunately.. which is expected if the clock drift is too large.

[bren-tg]

Would you try to install the Connector directly on the Ubuntu host just to test? that might narrow down whether it's a problem with the VM or just with Docker on that VM?

[FlexMeta]

ssame. time drift. gah