Jira (BOLT-1298) Linux- Have to log in to serverA as a userA, then sudo to root. Then we need to run bolt. It tries to run as userA and not root

[Jackie Andrason (JIRA)]

Title: Message Title

Jackie Andrason created an issue   Puppet Task Runner / BOLT-1298 Linux- Have to log in to serverA as a userA, then sudo to root. Then we need to run bolt. It tries to run as userA and not root Issue Type: Bug Affects Versions: BOLT 1.18.0 Assignee: Unassigned Components: bolt Created: 2019/05/09 7:19 AM Priority: Normal Reporter: Jackie Andrason In our environment, we cannot log directly in to servers as root.  We have an 'admin' server that we log in as our userid, then have to sudo to root.  Root can ssh without password from this server to all other servers to run admin scripts.  When trying to run bolt after doing 'sudo su - ", it tries to run as the underlying (login) userid, and therefore fails.  Since most of our admins probably don't have ssh keys from this server, it wouldn't work to use --run-as root.  See my test:   [userA@serverA ~]$ whoami userA [userA@serverA ~]$ sudo su - [root@serverA ~]# whoami root [root@serverA ~]# who am i userA  pts/30       2019-05-09 10:12 (192.10.67.89) [root@serverA ~]# bolt command run "uname" --nodes serverB Started on serverB... all authorization methods failed (tried none, publickey, password) Failed on serverB:   Authentication failed for user userA@serverB Failed on 1 node: serverB Ran on 1 node in 0.50 seconds Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.308005.1557411582000.28899.1557411600755%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.