Fix ios_user auth test ssh key usage (#44170)
* Set PasswordAuthentication=no for ios_user pubkey login * Set ssh key to 0600 to avoid ssh failure * Swap PasswordAuthentication for BatchMode
This commit is contained in:
parent
6d772874f9
commit
1db54dd6a1
1 changed files with 6 additions and 1 deletions
|
@ -41,6 +41,11 @@
|
|||
|
||||
|
||||
- block:
|
||||
- name: Ensure ssh key is not world readable
|
||||
file:
|
||||
path: "{{ role_path }}/files/test_rsa"
|
||||
mode: 0600
|
||||
|
||||
- name: Create user with sshkey
|
||||
ios_user:
|
||||
name: ssh_user
|
||||
|
@ -51,7 +56,7 @@
|
|||
sshkey: "{{ lookup('file', 'files/test_rsa.pub') }}"
|
||||
|
||||
- name: test sshkey login
|
||||
shell: "ssh ssh_user@{{ ansible_ssh_host }} -p {{ ansible_ssh_port|default(22) }} -o IdentityFile={{ role_path }}/files/test_rsa -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o PubkeyAuthentication=yes show version"
|
||||
shell: "ssh ssh_user@{{ ansible_ssh_host }} -p {{ ansible_ssh_port|default(22) }} -o IdentityFile={{ role_path }}/files/test_rsa -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o BatchMode=yes -o PubkeyAuthentication=yes show version"
|
||||
|
||||
- name: test login without sshkey (should fail)
|
||||
expect:
|
||||
|
|
Loading…
Reference in a new issue