|
 |
ea00c4 |
From 4dde2a9bed58aba13c730bf4a7314b21038d7a31 Mon Sep 17 00:00:00 2001
|
|
|
ea00c4 |
From: Eduardo Otubo <otubo@redhat.com>
|
|
|
ea00c4 |
Date: Mon, 25 Jan 2021 16:24:29 +0100
|
|
|
ea00c4 |
Subject: [PATCH 2/2] Revert "ssh_util: handle non-default AuthorizedKeysFile
|
|
|
ea00c4 |
config (#586)" (#775)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
RH-Author: Eduardo Terrell Ferrari Otubo (eterrell)
|
|
|
ea00c4 |
RH-MergeRequest: 38: Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)" (#775)
|
|
|
ea00c4 |
RH-Commit: [1/1] aec2860c773ad1921f3949dc622543e81860c5bf (eterrell/cloud-init)
|
|
|
ea00c4 |
RH-Bugzilla: 1919972
|
|
|
ea00c4 |
|
|
|
ea00c4 |
commit cdc5b81f33aee0ed3ef1ae239e5cec1906d0178a
|
|
|
ea00c4 |
Author: Daniel Watkins <oddbloke@ubuntu.com>
|
|
|
ea00c4 |
Date: Tue Jan 19 12:23:23 2021 -0500
|
|
|
ea00c4 |
|
|
|
ea00c4 |
Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)" (#775)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
This reverts commit b0e73814db4027dba0b7dc0282e295b7f653325c.
|
|
|
ea00c4 |
|
|
|
ea00c4 |
Signed-off-by: Eduardo Otubo <otubo@redhat.com>
|
|
|
ea00c4 |
---
|
|
|
ea00c4 |
cloudinit/ssh_util.py | 6 +++---
|
|
|
ea00c4 |
tests/unittests/test_sshutil.py | 6 +++---
|
|
|
ea00c4 |
2 files changed, 6 insertions(+), 6 deletions(-)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
diff --git a/cloudinit/ssh_util.py b/cloudinit/ssh_util.py
|
|
|
ea00c4 |
index d5113996..c08042d6 100644
|
|
|
ea00c4 |
--- a/cloudinit/ssh_util.py
|
|
|
ea00c4 |
+++ b/cloudinit/ssh_util.py
|
|
|
ea00c4 |
@@ -262,13 +262,13 @@ def extract_authorized_keys(username, sshd_cfg_file=DEF_SSHD_CFG):
|
|
|
ea00c4 |
|
|
|
ea00c4 |
except (IOError, OSError):
|
|
|
ea00c4 |
# Give up and use a default key filename
|
|
|
ea00c4 |
- auth_key_fns.append(default_authorizedkeys_file)
|
|
|
ea00c4 |
+ auth_key_fns[0] = default_authorizedkeys_file
|
|
|
ea00c4 |
util.logexc(LOG, "Failed extracting 'AuthorizedKeysFile' in SSH "
|
|
|
ea00c4 |
"config from %r, using 'AuthorizedKeysFile' file "
|
|
|
ea00c4 |
"%r instead", DEF_SSHD_CFG, auth_key_fns[0])
|
|
|
ea00c4 |
|
|
|
ea00c4 |
- # always store all the keys in the first file configured on sshd_config
|
|
|
ea00c4 |
- return (auth_key_fns[0], parse_authorized_keys(auth_key_fns))
|
|
|
ea00c4 |
+ # always store all the keys in the user's private file
|
|
|
ea00c4 |
+ return (default_authorizedkeys_file, parse_authorized_keys(auth_key_fns))
|
|
|
ea00c4 |
|
|
|
ea00c4 |
|
|
|
ea00c4 |
def setup_user_keys(keys, username, options=None):
|
|
|
ea00c4 |
diff --git a/tests/unittests/test_sshutil.py b/tests/unittests/test_sshutil.py
|
|
|
ea00c4 |
index 88a111e3..fd1d1bac 100644
|
|
|
ea00c4 |
--- a/tests/unittests/test_sshutil.py
|
|
|
ea00c4 |
+++ b/tests/unittests/test_sshutil.py
|
|
|
ea00c4 |
@@ -593,7 +593,7 @@ class TestMultipleSshAuthorizedKeysFile(test_helpers.CiTestCase):
|
|
|
ea00c4 |
fpw.pw_name, sshd_config)
|
|
|
ea00c4 |
content = ssh_util.update_authorized_keys(auth_key_entries, [])
|
|
|
ea00c4 |
|
|
|
ea00c4 |
- self.assertEqual(authorized_keys, auth_key_fn)
|
|
|
ea00c4 |
+ self.assertEqual("%s/.ssh/authorized_keys" % fpw.pw_dir, auth_key_fn)
|
|
|
ea00c4 |
self.assertTrue(VALID_CONTENT['rsa'] in content)
|
|
|
ea00c4 |
self.assertTrue(VALID_CONTENT['dsa'] in content)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
@@ -610,7 +610,7 @@ class TestMultipleSshAuthorizedKeysFile(test_helpers.CiTestCase):
|
|
|
ea00c4 |
sshd_config = self.tmp_path('sshd_config')
|
|
|
ea00c4 |
util.write_file(
|
|
|
ea00c4 |
sshd_config,
|
|
|
ea00c4 |
- "AuthorizedKeysFile %s %s" % (user_keys, authorized_keys)
|
|
|
ea00c4 |
+ "AuthorizedKeysFile %s %s" % (authorized_keys, user_keys)
|
|
|
ea00c4 |
)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
(auth_key_fn, auth_key_entries) = ssh_util.extract_authorized_keys(
|
|
|
ea00c4 |
@@ -618,7 +618,7 @@ class TestMultipleSshAuthorizedKeysFile(test_helpers.CiTestCase):
|
|
|
ea00c4 |
)
|
|
|
ea00c4 |
content = ssh_util.update_authorized_keys(auth_key_entries, [])
|
|
|
ea00c4 |
|
|
|
ea00c4 |
- self.assertEqual(user_keys, auth_key_fn)
|
|
|
ea00c4 |
+ self.assertEqual("%s/.ssh/authorized_keys" % fpw.pw_dir, auth_key_fn)
|
|
|
ea00c4 |
self.assertTrue(VALID_CONTENT['rsa'] in content)
|
|
|
ea00c4 |
self.assertTrue(VALID_CONTENT['dsa'] in content)
|
|
|
ea00c4 |
|
|
|
ea00c4 |
--
|
|
|
ea00c4 |
2.18.4
|
|
|
ea00c4 |
|