Abnormal cancellation #2459

Open
opened 2025-11-20 07:10:04 -05:00 by saavagebueno · 1 comment
Owner

Originally created by @lsx1205 on GitHub (Nov 14, 2025).

Describe the problem

A clear and concise description of what the problem is.

To Reproduce

Steps to reproduce the behavior:
Log in through the netbird client, jump to the oidc interface, then disconnect, click the logout button, and an Error: Error Failed to deregister, the server also reports an error: 2025-11-14T06:10:48Z ERRO [accountID: d45hio1rm84c73b1rrt0, peerID: d4bceh9rm84c738t9jn0, context: GRPC, requestID: 7e142bd5-8f86-4a50-bfb3-ce10bcdad04f] management/server/grpcserver. go:1007: failed to logout peer LmCORssdHEZhffWSXhmISM+SQ2DkICvfQdnlk1+lnEU=: permission denied,Judging from the error report, it was caused by inconsistent peer ids. However, on the console, I couldn't see the corresponding peer id, which means I have no idea which user repeated the error

Expected behavior
It can be normally cancelled.

Please specify whether you use NetBird Cloud or self-host NetBird's control plane.
Self-hosted

NetBird version
0.59.12

Is any other VPN software installed?
no

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @lsx1205 on GitHub (Nov 14, 2025). **Describe the problem** A clear and concise description of what the problem is. **To Reproduce** Steps to reproduce the behavior: Log in through the netbird client, jump to the oidc interface, then disconnect, click the logout button, and an Error: Error Failed to deregister, the server also reports an error: 2025-11-14T06:10:48Z ERRO [accountID: d45hio1rm84c73b1rrt0, peerID: d4bceh9rm84c738t9jn0, context: GRPC, requestID: 7e142bd5-8f86-4a50-bfb3-ce10bcdad04f] management/server/grpcserver. go:1007: failed to logout peer LmCORssdHEZhffWSXhmISM+SQ2DkICvfQdnlk1+lnEU=: permission denied,Judging from the error report, it was caused by inconsistent peer ids. However, on the console, I couldn't see the corresponding peer id, which means I have no idea which user repeated the error **Expected behavior** It can be normally cancelled. Please specify whether you use NetBird Cloud or self-host NetBird's control plane. Self-hosted **NetBird version** 0.59.12 **Is any other VPN software installed?** no Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:10:04 -05:00
Author
Owner

@Dwimcore commented on GitHub (Nov 14, 2025):

Hello,

On a similar setup (SH netbird v0.59.10, client v0.59.10), I do seem to encounter a similar problem.

I always get these errors when trying to netbird deregister (or via client UI on linux):

client side:

Error: deregister: rpc error: code = PermissionDenied desc = logout: rpc error: code = PermissionDenied desc = permission denied

management side:

[context: GRPC, requestID: 8e212128-f75d-4c22-a31e-afb898da97cb, accountID: d4av04q01v7erq3tduig, peerID: d4bjj5201v750v2or6kg] management/server/grpcserver.go:1007: failed to logout peer L3f2/ZDdowjkjVw4B5IOwqWM5cWwjMknZ5TcICCsEzw=: permission denied

After a few tests, I suggest it is due to a permissions problem on the peer's registering user:
If a user with a role < admin registers a peer, they cannot deregister it. If I change their role to Admin in the dashboard, then user can now deregister that device.

Edit: this problem doesn't seem to appear with setup keys

@Dwimcore commented on GitHub (Nov 14, 2025): Hello, On a similar setup (SH netbird v0.59.10, client v0.59.10), I do seem to encounter a similar problem. I always get these errors when trying to `netbird deregister` (or via client UI on linux): client side: > Error: deregister: rpc error: code = PermissionDenied desc = logout: rpc error: code = PermissionDenied desc = permission denied management side: > [context: GRPC, requestID: 8e212128-f75d-4c22-a31e-afb898da97cb, accountID: d4av04q01v7erq3tduig, peerID: d4bjj5201v750v2or6kg] management/server/grpcserver.go:1007: failed to logout peer L3f2/ZDdowjkjVw4B5IOwqWM5cWwjMknZ5TcICCsEzw=: permission denied After a few tests, I suggest it is due to a permissions problem on the peer's registering user: If a user with a role < admin registers a peer, they cannot deregister it. If I change their role to Admin in the dashboard, then user can now deregister that device. Edit: this problem doesn't seem to appear with setup keys
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2459