tailscale / tailscale/tailscale

FR: tailscale login should have --accept-risk=lose-ssh flag

Open
#15,547 2 comments 0 reactions 0 assignees View on GitHub
fr needs-triage
Dominant language
Go
Stars
36.5k
Forks
3.2k
Avg merge
2d 3h
Merged PRs (30d)
123

Description

### What are you trying to do?

`tailscale login` eagerly logs out. I wanted to switch accounts of a remote tailscale device and using `tailscale login --nickname newaccount` immediately logged me out AND broke the SSH connection.

### How should we solve this?

The logout can wait (maybe?) till the new account has authenticated. This might enable switching accounts on tailscale devices that are remote.

Even if we don't implement lazy logout, not losing SSH connection in this scenario will be a win.

### What is the impact of not solving this?

- It is not possible to switch tailscale account on remote machines (without using auth keys)
- It is easy to think that you can do it but login command doesn't stop you from getting locked out

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.