# Pritunl-zero ssh bastion allows to login as any user?

**URL:** <https://forum.pritunl.com/t/pritunl-zero-ssh-bastion-allows-to-login-as-any-user/868>\
**Category:** Pritunl Zero\
**Tags:** pritunl-zero\
**Created:** [March 16, 2023, 12:19pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-bastion-allows-to-login-as-any-user/868 "2023-03-16T12:19:52Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![avid-fan](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/a/848f3c/32.png) [@avid-fan](https://forum.pritunl.com/u/avid-fan)\
**Post date:** [March 17, 2023, 6:47pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-bastion-allows-to-login-as-any-user/868/6 "2023-03-17T18:47:36Z")

</div>

Oh, it’s not just us who believe this problem (inability to differentiate users) to be an opportunity for substantial improvement.

> [@Pritunl zero ssh - all users?](https://forum.pritunl.com/t/pritunl-zero-ssh-all-users/403):
>
> SERVER: domain SSH\_KEY: ~/.ssh/id\_rsa.pub OPEN: domain/ssh?ssh-token=REDACTED CERTIFICATE: ~/.ssh/id\_rsa-cert.pub SSH\_CONFIG: ~/.ssh/config Successfully validated SSH key ssh -i id\_rsa.pub user@host.x.y Any username works… user1, root, user2, etc… How does the cert get bound to a single user, or is this a bug?

Other than that hiccup we like Pritunl Zero _very_ much and are hoping Zach will figure out a better way… fingers crossed!.. 🙂

---

_[View the full topic](https://forum.pritunl.com/t/pritunl-zero-ssh-bastion-allows-to-login-as-any-user/868)._