Skip to content

centralized location of keys and drop_privileges = false works in debug mode only #105

@loopiv

Description

@loopiv

Describe the Bug

When using a centralized location for keys, e.g. /etc/ssh/authorized_keys, that is owned by root, a trusted path error occurs. However, files are created successfully when --debug is used.

Expected Behavior

Trusted path should succeed without running puppet in debug mode.

Steps to Reproduce

Steps to reproduce the behavior:

  1. Add a key with target of, e.g., /etc/ssh/authorized_keys/$user and use "drop_privileges => false".
  2. Run puppet agent -t
    Note trusted path error and the key file is not created.
  3. Run puppet agent -t --debug
    No error and keyfile is created.

Environment

  • Version 7.34.0
  • Platform: Oracle Linux 8

Additional Context

This is somewhat related to #92 . In secure environments, keys are usually managed in central location and key files are owned by root(or other admin user) or not writable by the user.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions