gpdb icon indicating copy to clipboard operation
gpdb copied to clipboard

gpssh-exkeys utility ignore the AuthorizedKeysFile parameter of /etc/ssh/sshd_config

Open jose-l-goncalves-alb opened this issue 1 year ago • 0 comments

Bug Report

We are deploying greenplum-db 7.1.0 in a cluster of VMs with AuthorizedKeysFile parameter configured at /etc/ssh/sshd_config: AuthorizedKeysFile /etc/ssh/authorized_keys/%u

gpssh-exkeys ignores this configuration and assume, incorrectly, that authorized_keys file is ~/.ssh/authorized_keys instead of /etc/ssh/authorized_keys/gpadmin

Greenplum version or build

7.1.0 (installed by rpm)

OS version and uname -a

Red Hat Enterprise Linux release 8.6 (Ootpa) Linux xxx 4.18.0-348.el8.x86_64 #1 SMP Wed Nov 10 11:25:16 PST 2021 x86_64 x86_64 x86_64 GNU/Linux

autoconf options used ( config.status --config )

NA

Installation information ( pg_config )

NA

Expected behavior

Assume authorized_keys file at /etc/ssh/authorized_keys/gpadmin

Actual behavior

Assume authorized_keys file at ~/.ssh/authorized_keys

Step to reproduce the behavior

Configure AuthorizedKeysFile parameter at /etc/ssh/sshd_config: AuthorizedKeysFile /etc/ssh/authorized_keys/%u

jose-l-goncalves-alb avatar Feb 12 '24 19:02 jose-l-goncalves-alb