Expected behavior:

Provide either a message in the audit log or to the user that host user creation is not allowed for the user.

Current behavior:

If not all roles matching nodes have host user creation allowed a user gets an error like this. This is confusing to know the issue is related to role permission.

disconnected
Failed to launch: Authentication failure.
Process exited with status 255

Bug details:

• Teleport version: 15.2.1

• Recreation steps

  Configure a role without host user creation and have a user attempt to access the node with a user that doesn't exist.