Troubleshooting

Access Denied.

Access Denied. is a cryptic message that Gateway sends when it receives a request from an IP address it doesn't allow requests from. To fix it specify your client's IP address in the conf.yaml under ips/allow and ensure your IP is not listed in ips/deny.

Eg.:

ips:
  allow:
    10.148.0.0
    10.149.*

Learn how to provide IBeam with a custom conf.yaml in Gateway Configuration section.

Hostname X doesn't match Y

This should only appear if you use your own TLS certificates. It means your certificate was created without specifying the client host IP or DNS you're trying to communicate from. You will need to recreate your certificates including the IP or DNS of the machine you're communicating from.

See the optional SAN specification in Step 1 of either Keytool or OpenSSL certificate generation.

Two-factor Authentication

Currently IBeam does not handle two-factor authentication and given its nature it is unlikely we will be able to handle it gracefully. If your account is required to perform two-factor authentication on login, you will need to complete it every time IBeam attempts to authenticate.

If you need more time to complete two-factor authentication you can increase the login timeouts using IBEAM_OAUTH_TIMEOUT and IBEAM_REQUEST_TIMEOUT variables. Read more in Optional environment variables.