Issue #21406 has been reported by Jo Rhett.

----------------------------------------
Bug #21406: sshkey will create blank keys but is unable to remove any entries 
from the file thereafter
https://projects.puppetlabs.com/issues/21406

* Author: Jo Rhett
* Status: Unreviewed
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 3.2.3
* Affected Puppet version: 3.2.2
* Keywords: 
* Branch: 
----------------------------------------
Given the following policy:
<pre>
sshkey { empty:
  ensure => present,
  type     => ssh-rsa,
  key      => $undefinedvalue,
}
sshkey { jrhett:
  ensure => present,
  type     => ssh-rsa,
  key      => 'blahlbahblahblahXblahXblahXX==',
}
</pre>

This creates the file as you would expect:
<pre>
$ cat /etc/ssh/ssh_known_hosts
# HEADER: This file was autogenerated at Sat Jun 22 20:00:19 -0700 2013
# HEADER: by puppet.  While it can still be managed manually, it
# HEADER: is definitely not recommended.
empty ssh-rsa 
jrhett ssh-rsa blahlbahblahblahXblahXblahXX==
</pre>

Further additions to this file work fine, however any attempt to remove a key 
from this file, either the empty key or a properly created key, create an error:

<pre>
Notice: /Stage[main]/Users::Allusers/Userandkey[jrhett]/Sshkey[jrhett]/ensure: 
removed
Error: /Stage[main]/Users::Allusers/Userandkey[jrhett]/Sshkey[jrhett]: Could 
not evaluate: Field 'key' is required
</pre>

I discovered this in 3.2.2 however it may be visible in earlier versions (as I 
don't think this code has changed much). This appears to be related to #3377 
but that's for you to determine.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to