Issue #23308 has been reported by Branan Purvine-Riley.

----------------------------------------
Bug #23308: Puppet cannot create an authorized key for a user which does not 
have write access to /tmp
https://projects.puppetlabs.com/issues/23308

* Author: Branan Purvine-Riley
* Status: Unreviewed
* Priority: Normal
* Assignee: 
* Category: agent
* Target version: 
* Affected Puppet version: 3.3.2
* Keywords: 
* Branch: 
----------------------------------------
the `ssh_authorized_key` provider uses `parsedfile`, which creates a tempfile 
to (presumably) ensure atomic changes.

During the application of `ssh_authorized_key`, the euid of puppet is the 
target user for the resource. This means that if that user does not have write 
access to /tmp (or whatever puppet's tmpdir is set to), the tempfile used by 
parsedfile cannot be written, and the `ssh_authorized_key` resource will fail.

A simple way to test this is to chmod /tmp to 755 and attempt to create an 
authorized_key for a non-root user.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to