cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fix ios_user auth test ssh key usage (#44170)

Browse source 
* Set PasswordAuthentication=no for ios_user pubkey login

* Set ssh key to 0600 to avoid ssh failure

* Swap PasswordAuthentication for BatchMode
This commit is contained in:
Nathaniel Case 2018-08-15 11:34:36 -04:00 committed by GitHub
parent 6d772874f9
commit 1db54dd6a1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
test/integration/targets/ios_user/tests/cli/auth.yaml
View file

@ -41,6 +41,11 @@
- block: - block:
- name: Ensure ssh key is not world readable
file:
path: "{{ role_path }}/files/test_rsa"
mode: 0600
- name: Create user with sshkey - name: Create user with sshkey
ios_user: ios_user:
name: ssh_user name: ssh_user
@ -51,7 +56,7 @@
sshkey: "{{ lookup('file', 'files/test_rsa.pub') }}" sshkey: "{{ lookup('file', 'files/test_rsa.pub') }}"
- name: test sshkey login - name: test sshkey login
shell: "ssh ssh_user@{{ ansible_ssh_host }} -p {{ ansible_ssh_port|default(22) }} -o IdentityFile={{ role_path }}/files/test_rsa -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o PubkeyAuthentication=yes show version" shell: "ssh ssh_user@{{ ansible_ssh_host }} -p {{ ansible_ssh_port|default(22) }} -o IdentityFile={{ role_path }}/files/test_rsa -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o BatchMode=yes -o PubkeyAuthentication=yes show version"
- name: test login without sshkey (should fail) - name: test login without sshkey (should fail)
expect: expect: