Correct the profile removal and SSH authentication privilege wording (#895)

This commit is contained in:
Viktor Liu
2026-08-01 15:57:30 +02:00
committed by GitHub
parent fc92ecc8f3
commit ddec3c2f3c
5 changed files with 45 additions and 19 deletions
+10 -5
View File
@@ -509,7 +509,9 @@ For SFTP and SCP, use native clients (`sftp` and `scp` commands) which work with
**Connection fails:**
- Ensure SSH is enabled on the target peer, which requires root or an administrator:
- Ensure SSH is enabled on the target peer, which requires root or an administrator.
The commands below use `sudo` for Linux and macOS; on Windows run the same ones
without it, from an elevated prompt:
```shell
sudo netbird down; sudo netbird up --allow-server-ssh
```
@@ -520,13 +522,16 @@ For SFTP and SCP, use native clients (`sftp` and `scp` commands) which work with
- Complete the OIDC flow when prompted (browser window will open)
- Verify your IdP is properly configured
- To disable JWT authentication, as root or an administrator: `sudo netbird down; sudo netbird up --allow-server-ssh --disable-ssh-auth`
- To disable JWT authentication, as root or an administrator: `sudo netbird down; sudo netbird up --allow-server-ssh --disable-ssh-auth`.
This drops per-user authentication for SSH on that peer, leaving any peer the ACL
policy allows able to connect, so use it to isolate a problem and re-enable it with
`sudo netbird down; sudo netbird up --allow-server-ssh` afterwards.
**Port forwarding not working:**
- Ensure the server has the appropriate flags:
```shell
sudo netbird up --allow-server-ssh \
sudo netbird down; sudo netbird up --allow-server-ssh \
--enable-ssh-local-port-forwarding \
--enable-ssh-remote-port-forwarding
```
@@ -833,7 +838,7 @@ This will output:
-S, --system-info Adds system information to the debug bundle (default true)
-U, --upload-bundle Uploads the debug bundle to a server
--upload-bundle-url string Service URL to get an upload URL for the debug bundle (default "https://upload.debug.netbird.io/upload-url")
--upload-bundle-insecure Allow uploading to an http or untrusted-TLS upload server (self-hosted); requires root
--upload-bundle-insecure Allow uploading to an http or untrusted-TLS upload server (self-hosted); requires root on Linux and macOS, or an administrator on Windows
```
### debug for
@@ -873,7 +878,7 @@ Log level restored to INFO
-S, --system-info Adds system information to the debug bundle (default true)
-U, --upload-bundle Uploads the debug bundle to a server
--upload-bundle-url string Service URL to get an upload URL for the debug bundle (default "https://upload.debug.netbird.io/upload-url")
--upload-bundle-insecure Allow uploading to an http or untrusted-TLS upload server (self-hosted); requires root
--upload-bundle-insecure Allow uploading to an http or untrusted-TLS upload server (self-hosted); requires root on Linux and macOS, or an administrator on Windows
```
### debug log