From 895e5b47d00951621f21e108cacad2b0bf71f69e Mon Sep 17 00:00:00 2001 From: Johan Brandhorst-Satzkorn Date: Tue, 11 Feb 2025 14:40:07 -0800 Subject: [PATCH] docs/client-agent: add warning about MacOS 15 MacOS 15.3 has been known to sometimes block users from using the client agent altogether. Explicitly allowing it access to incoming network connections resolves the issue. --- website/content/docs/api-clients/client-agent.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/website/content/docs/api-clients/client-agent.mdx b/website/content/docs/api-clients/client-agent.mdx index e8556fab31..069b0800b0 100644 --- a/website/content/docs/api-clients/client-agent.mdx +++ b/website/content/docs/api-clients/client-agent.mdx @@ -521,6 +521,8 @@ Follow the troubleshooting steps to understand why the Client Agent is not able On MacOS versions 15.1 and 15.2, the firewall may incorrectly block the Client Agent from sending DNS responses. To resolve this issue, upgrade to MacOS version 15.3 or later. +It may be neccessary to explicitly allow the `boundary-client-agent` process access to incoming network connections. + #### WARNING! Remote host indentification has changed! It is possible that someone is doing something nasty! This error arises when you use an alias to connect to an SSH target after the first successful connection using that alias. The issue occurs because Boundary workers generate a new host key on every new SSH connection. You can safely ignore the warning using the `StrictHostKeyChecking=no` command line option: