Tunneler crashes when trying to use ext-jwt-login option

Hey,

When I try to login using external jwt signer on linux the tunneler crashes.
I've tried to the identity with url and also with the network jwt, same error.
This is the command I'm trying to run ziti-edge-tunnel ext-jwt-login -p entra,
when I added the identity I used option -i ziti. I tried passing that to the ext-jwt-login command I get ziti context not found so that's why I ommited it and then I get the crash.
Tunneler version: 1.6.0
OS: Ubuntu 24.10

Did someone experience something simmilar? what could be the problem?
Thanks in advance!

2025-06-09T21:32:52+02:00 wk-work ziti-edge-tunnel[13757]: (13757)[        0.004]    INFO ziti-edge-tunnel:resolvers.c:402 try_libsystemd_resolver() systemd-resolved selected as DNS resolver manager
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: (13757)[       23.878]   ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1024 on_crash() received signal: Segmentation fault
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x1edd3) [0x58abf0aebdd3]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /lib/x86_64-linux-gnu/libc.so.6(+0x45250) [0x7f89c8445250]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /lib/x86_64-linux-gnu/libc.so.6(+0x19849d) [0x7f89c859849d]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x58ad9) [0x58abf0b25ad9]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x70194) [0x58abf0b3d194]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x2e807) [0x58abf0afb807]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x94b16) [0x58abf0b61b16]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x95480) [0x58abf0b62480]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x9d414) [0x58abf0b6a414]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x89be7) [0x58abf0b56be7]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x1f1c0) [0x58abf0aec1c0]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x2046b) [0x58abf0aed46b]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x1e451) [0x58abf0aeb451]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /lib/x86_64-linux-gnu/libc.so.6(+0x2a3b8) [0x7f89c842a3b8]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x8b) [0x7f89c842a47b]
2025-06-09T21:33:15+02:00 wk-work ziti-edge-tunnel[13757]: /opt/openziti/bin/ziti-edge-tunnel(+0x1e4a5) [0x58abf0aeb4a5]

Hi @gmat98 and welcome to the OpenZiti discourse and thanks for reporting the issue!

It's funny, I just noticed the crash that you mentioned recently and I fixed it. This fix will go into the next release, but it will only help by failing gracefully. You'll still need to provide an identity to the ext-jwt-login command.

The -i parameter needs to match the "identifier" of the identity as ziti-edge-tunnel sees it. It's usually the full path to the identity's json file, but you can check by looking at the ziti-edge-tunnel tunnel_status output.

1 Like

Cool, it worked!

Thank you for your time and help! :slight_smile:

1 Like