From c5939432093bfc663a1e7918c5ef2879fb9fb51a Mon Sep 17 00:00:00 2001 From: Johan Brandhorst-Satzkorn Date: Tue, 11 Feb 2025 15:50:40 -0800 Subject: [PATCH] docs/client-agent: add warning about MacOS 15 (#5543) * docs/client-agent: add warning about MacOS 15 MacOS 15.3 has been known to sometimes block users from using the client agent altogether. Explicitly allowing it access to incoming network connections resolves the issue. * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Robin Beck --------- Co-authored-by: Robin Beck --- website/content/docs/api-clients/client-agent.mdx | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/website/content/docs/api-clients/client-agent.mdx b/website/content/docs/api-clients/client-agent.mdx index e8556fab3..461e50c97 100644 --- a/website/content/docs/api-clients/client-agent.mdx +++ b/website/content/docs/api-clients/client-agent.mdx @@ -521,6 +521,10 @@ Follow the troubleshooting steps to understand why the Client Agent is not able On MacOS versions 15.1 and 15.2, the firewall may incorrectly block the Client Agent from sending DNS responses. To resolve this issue, upgrade to MacOS version 15.3 or later. +It may be neccessary to explicitly allow the `boundary-client-agent` process access to incoming network connections. + +From the Firewall options in System Settings, toggle the `boundary-client-agent' to **Allow incoming connections**. + #### WARNING! Remote host indentification has changed! It is possible that someone is doing something nasty! This error arises when you use an alias to connect to an SSH target after the first successful connection using that alias. The issue occurs because Boundary workers generate a new host key on every new SSH connection. You can safely ignore the warning using the `StrictHostKeyChecking=no` command line option: