Andy Kurth created VCL-743:
------------------------------
Summary: run_ssh_command fails if SSH key permissions are incorrect
Key: VCL-743
URL: https://issues.apache.org/jira/browse/VCL-743
Project: VCL
Issue Type: Bug
Components: vcld (backend)
Affects Versions: 2.3.1
Reporter: Andy Kurth
Assignee: Andy Kurth
Priority: Minor
Fix For: 2.4
run_ssh_command may fail to correctly parse output if the SSH command attempts
to use an identity key with incorrect permissions. This occurs even though the
command succeeded by using another key. If the permissions are incorrect on
the private key, the following will be displayed:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/etc/vcl/bad.key' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: /etc/vcl/bad.key
Xlib: connection to "localhost:11.0" refused by server
Xlib: PuTTY X11 proxy: MIT-MAGIC-COOKIE-1 data did not match
(ssh-askpass:9365): Gtk-WARNING **: cannot open display:
<correct output starts here>
The run_ssh_command subroutine in utils.pm needs to be extended to detect this
and strip away the warning output.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)