disable ssh password auth during tripleo-admin enablement

Bug #1792641 reported by James Slagle
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Medium
James Slagle

Bug Description

SSH password authentication should be disabled when we try and enable the temporary key during the tripleo-admin user enablement. Otherwise, if the ssh key is rejected, the deployment will appear to hang since SSH is waiting at the password prompt.

Changed in tripleo:
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → James Slagle (james-slagle)
milestone: none → stein-1
tags: added: config-download rocky-backport-potential
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (master)

Fix proposed to branch: master
Review: https://review.openstack.org/602759

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (master)

Reviewed: https://review.openstack.org/602759
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=2535aca143b8eade668da3ba182ffeeb4de138f0
Submitter: Zuul
Branch: master

commit 2535aca143b8eade668da3ba182ffeeb4de138f0
Author: James Slagle <email address hidden>
Date: Fri Sep 14 17:12:49 2018 -0400

    Disable SSH password authentication during tripleo-admin enablement.

    SSH password authentication is now disabled when injecting the temporary
    SSH key during the tripleo-admin user enablement. This change will cause
    the SSH command to fail quickly if the key is rejected instead of appearing
    to hang at a password prompt which is never displayed to the user.

    Change-Id: I7b746b2033c217e78c3d9942995de1479a728943
    Closes-Bug: #1792641

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (stable/rocky)

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/609021

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (stable/rocky)

Reviewed: https://review.openstack.org/609021
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=74424dba322fd301b0f46ee0253d8650ecb31215
Submitter: Zuul
Branch: stable/rocky

commit 74424dba322fd301b0f46ee0253d8650ecb31215
Author: James Slagle <email address hidden>
Date: Fri Sep 14 17:12:49 2018 -0400

    Disable SSH password authentication during tripleo-admin enablement.

    SSH password authentication is now disabled when injecting the temporary
    SSH key during the tripleo-admin user enablement. This change will cause
    the SSH command to fail quickly if the key is rejected instead of appearing
    to hang at a password prompt which is never displayed to the user.

    Change-Id: I7b746b2033c217e78c3d9942995de1479a728943
    Closes-Bug: #1792641
    (cherry picked from commit 2535aca143b8eade668da3ba182ffeeb4de138f0)

tags: added: in-stable-rocky
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-tripleoclient 11.1.0

This issue was fixed in the openstack/python-tripleoclient 11.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/633028

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-tripleoclient (stable/queens)

Reviewed: https://review.openstack.org/633028
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=5fd323ce58a70df353e1f79c32215e79db300b73
Submitter: Zuul
Branch: stable/queens

commit 5fd323ce58a70df353e1f79c32215e79db300b73
Author: James Slagle <email address hidden>
Date: Fri Sep 14 17:12:49 2018 -0400

    Disable SSH password authentication during tripleo-admin enablement.

    SSH password authentication is now disabled when injecting the temporary
    SSH key during the tripleo-admin user enablement. This change will cause
    the SSH command to fail quickly if the key is rejected instead of appearing
    to hang at a password prompt which is never displayed to the user.

    Change-Id: I7b746b2033c217e78c3d9942995de1479a728943
    Closes-Bug: #1792641
    (cherry picked from commit 2535aca143b8eade668da3ba182ffeeb4de138f0)
    (cherry picked from commit 74424dba322fd301b0f46ee0253d8650ecb31215)

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-tripleoclient 10.6.1

This issue was fixed in the openstack/python-tripleoclient 10.6.1 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-tripleoclient 9.2.7

This issue was fixed in the openstack/python-tripleoclient 9.2.7 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.