Static Tokens

[simaqsous]

I am trying to generate static token ( teleport vs 16.1.4 ) and I am configuring it right here

auth_service:
  tokens:
    - 'proxy,node:teleport-token-test'
  enabled: "yes"

as shown in the document in here https://goteleport.com/docs/reference/join-methods/#static-tokens
but when I run

tctl tokens ls

teleport-token-test    Proxy,Node        01 Jan 70 00:00 UTC (-479000h30m24s)

and when I try to use this token, it won't work, since it expired
any help would be appreciated

[webvictim]

What exact error do you get when you try to use that token?

Can you share the /etc/teleport.yaml config file from the server you're trying to join?

[simaqsous]

the output would be:
An error has occurred
The token may be expired or invalid
Please check log for further details

and here is the teleport.yaml file
version: v3
teleport:
nodename: teleport-node
data_dir: /var/lib/teleport
log:
output: stderr
severity: INFO
format:
output: text
ca_pin: ""
diag_addr: ""
auth_service:
tokens:
- "node:teleport-token-test"
enabled: "yes"
listen_addr: 0.0.0.0:3025
cluster_name: teleport.xxx.com
authentication:
second_factor: on
webauthn:
rp_id: teleport.xxx.com
ssh_service:
enabled: false
labels:
team: some-team
proxy_service:
enabled: "yes"
web_listen_addr: 0.0.0.0:443
listen_addr: 0.0.0.0:3023
public_addr: teleport.xxx.com:443
tunnel_public_addr: teleport.xxx.com:3024
tunnel_listen_addr: 0.0.0.0:3024
peer_listen_addr: 0.0.0.0:3022
ssh_public_addr:teleport.xxx.com:3023
kube_listen_addr: 0.0.0.0:3026
kube_public_addr: teleport.xxx.com:3026
acme: {}

[webvictim]

Ah - that looks like you're attempting to use a static token with the join script in the web UI by manually overwriting the auto-generated token in the URL?

That won't work, unfortunately - the join scripts only support the use of dynamic tokens.

[simaqsous]

so this information here is inaccurate ?

[webvictim]

You can use static tokens if you really want to, but they don't work with the script which is generated by the web UI. You would need to install the Teleport binaries yourself and write your own config file.

Follow this section of the docs: https://goteleport.com/docs/enroll-resources/server-access/getting-started/