Jira (PUP-11072) purge_ssh_keys does not work if the key file is not owned by the user

[Gabriel Nagy (Jira)]

Title: Message Title

Gabriel Nagy commented on PUP-11072   Re: purge_ssh_keys does not work if the key file is not owned by the user Hi Martin Alfke, A possible workaround would be to purge the keys through the root user (or another superuser), such as: user { 'root': purge_ssh_keys => ['/etc/ssh/keys/testuser'], } If we add this functionality it would good to also have something similar in the sskeys_core module. Currently the file owner is controlled by the user parameter, and the file path maps to target, so a sample authorized key would be: ssh_authorized_key { 'testuser@ubuntu': ensure => present, user => 'root', target => '/etc/ssh/keys/testuser', type => 'ssh-rsa', key => 'AAAAB3NzaqXfdaQ==', } The limitation in the module would be that the file permissions are hardcoded to 600. This can be circumvented by ensuring the mode through a file resource, but it will cause corrective changes each time an authorized key changes. (authorized key resource enforces 600, file resource enforces 644). Since the functionality you request is achievable through a workaround in the user resource, I'm inclined against adding a new parameter in the user type. Josh Cooper what are your thoughts on this? Add Comment   This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.400814.1622037183000.49883.1623080400396%40Atlassian.JIRA.