Windows Client Error: rpc error: code = PermissionDenied desc = invalid user

[samf-acacia]

Describe the problem

A subset of Windows 11 users in our environment are having trouble connecting to our self-hosted Netbird instance. We also run Ubuntu Desktop clients, but this issue doesn't affect those devices. We run Microsoft Entra-ID for SAML/SSO authentication to connect.

When a user (who is having the issue) attempts to connect to the Netbird from Windows, they are forwarded to the Entra login page and manage to successfully authenticate, and are presented with the "Login Successful" page from Netbird. After about 15-20 seconds Netbird time out and they get the error:

rpc error: code = PermissionDenied desc = invalid user

Tried to search past issues, but couldn't find anything related to this specific issue.

The user does show up in the Management portal (successful login??) of our instance, tried removing and reconnecting, but that didn't work.

To Reproduce

Steps to reproduce the behavior:

1. Go to Netbird VPN client and attempt to connect
2. Log in using Entra ID credentials
3. Wait 15-20 seconds for the client to time out
4. See error rpc error: code = PermissionDenied desc = invalid user

Expected behavior

A successful connection to our Netbird instance since it shows Login Successful.

Are you using NetBird Cloud?

Self hosting Netbird

NetBird version

v0.35.2 on Server and Clients

Do you face any (non-mobile) client issues?

This is specifically a Windows 11 client issue

Screenshots

[d-givens]

Having the exact same problem with one user. Entra ID. Self-hosted. Same issues. But only one user. 20 other users are fine.

[farezramilo]

I had the same issue in the free tier, but it seemed like the issue was caused by the user's machine itself. The user's machine was included in another free tier group, having that machine removed everywhere else except my group fixed the issue. Maybe if a machine is included in a free tier it can't be included elsewhere?

[d-givens]

I had the same issue in the free tier, but it seemed like the issue was caused by the user's machine itself. The user's machine was included in another free tier group, having that machine removed everywhere else except my group fixed the issue. Maybe if a machine is included in a free tier it can't be included elsewhere?

We're both self-hosted instead of free tier.

[K0-RR]

I'm having the same issue on Ubuntu 22.04 (free tier) so it's not Windows-related.

[samf-acacia]

@d-givens The exact same problem.............

Except 3 users in about 20 users see this problem.

[bsmithuk]

Same bandwagon but on Fedora 41.

[sergeycherepanov]

macos - same issue, the issue appears in case when the same peer already exists by another user. In my case I was authenticated as admin previously.

[samf-acacia]

macos - same issue, the issue appears in case when the same peer already exists by another user. In my case I was authenticated as admin previously.

Yeah we tried this but were still getting the same error :(

[bsmithuk]

Fix for me was absolutely nuking the install and rm any directories connected to netbird and disconnecting tailscale. Fixed it for me.

[d-givens]

Fix for me was absolutely nuking the install and rm any directories connected to netbird and disconnecting tailscale. Fixed it for me.

This is on the client side that you're removing the install?

[bsmithuk]

Yep correct removed client install completely

…

On January 17, 2025 2:45:28 PM GMT, d-givens ***@***.***> wrote: > Fix for me was absolutely nuking the install and rm any directories connected to netbird and disconnecting tailscale. Fixed it for me. This is on the client side that you're removing the install? -- Reply to this email directly or view it on GitHub: #3158 (comment) You are receiving this because you commented. Message ID: ***@***.***>