Upgrade to 0.25.4-2ubuntu6.3 introduces http://projects.puppetlabs.com/issues/3922

Bug #865462 reported by Joe Shaw on 2011-10-03
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet (Ubuntu)
Jamie Strandboge

Bug Description

Attempts to run puppet manifests that manipulate authorized_keys now fail with errors like:

err: Could not apply complete catalog: Could not back up /home/whomever/.ssh/authorized_keys: Permission denied - /var/lib/puppet/clientbucket/d

This was introduced in 0.25.5 of puppet upstream and fixed in a later release: http://projects.puppetlabs.com/issues/3922

It works fine with 0.25.4-2ubuntu6.1; not sure about 6.2.

Jamie Strandboge (jdstrand) wrote :

Thank you for reporting this Joe. I will have packages available shortly; would you be willing to test them?

Changed in puppet (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → High
status: New → In Progress
Changed in puppet (Ubuntu Lucid):
status: New → Fix Committed
importance: Undecided → High
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in puppet (Ubuntu Oneiric):
status: In Progress → Invalid
importance: High → Undecided
assignee: Jamie Strandboge (jdstrand) → nobody
Joe Shaw (joeshaw) wrote :

Yep, I'd be happy to.

Jamie Strandboge (jdstrand) wrote :

I uploaded a new puppet for Lucid to the ubuntu-security-proposed ppa (https://launchpad.net/~ubuntu-security-proposed/+archive/ppa/+packages). Can someone affected by this bug comment on if the updated packages fixes the issue?

You can fetch specific binaries at:

Joe Shaw (joeshaw) wrote :

These packages fix the problem for me. Thanks Jamie!

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package puppet - 0.25.4-2ubuntu6.4

puppet (0.25.4-2ubuntu6.4) lucid-security; urgency=low

  * adjust ssh_authorized_key/parsed.rb: save backup file to filebucket before
    dropping privileges. Based on upstream commit:
    - http://projects.puppetlabs.com/issues/4267
    - LP: #865462
 -- Jamie Strandboge <email address hidden> Tue, 04 Oct 2011 07:54:33 -0500

Changed in puppet (Ubuntu Lucid):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers