MadinaK.45749 (Customer) asked a question.
Okta ASA sft login is not working for a specific user in specific project only
Hello Okta Support Team,
I have 2 questions:
- Okta ASA sft login is not working for one specific user in one specific project only. Other users in a group assigned to that project has no issues accessing.
The error message the user is getting:
* sft ssh ukprodsec-bastion
error: invalid PEM block type
ssh_exchange_identification: Connection closed by remote host
2.When we do "sft enroll" web browser opens to select the team. When we select a team and click "Approve" button nothing is happening.
Please advise.
Thanks,
Madina
Madina,
Thank you for the question. If the user is not enrolled they will not be able to access the resources. To validate a user can access the resources you can run 'sft list-servers' and this will print out the servers available. A common occurrence is if a request to enroll has already be tried and a valid response isn't sent then our asa server will be waiting on this response and cause the subsequent ones to not be able to be processed since it is still waiting on the first one. I would wait some time for everything to time out and try again.
If there is still an issue seen you can enable debug which will provide more information and this can be done with the commands below:
Windows: set SFT_DEBUG=1
MAC/Linux: SFT_DEBUG=1 sft list-servers (This will print out the servers and should show the debug logs)
Once these are set try to enroll and see what error is thrown. Let me know what you see.