Kerberos Auth in remote ssh actions #5278
Unanswered
rush-skills
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Is there any way to use Kerberos auth in SSH for
remote
orremote_sudo
action, where ssh key is not present for the system_user? I have set up a system user (with no ssh keys or home directory) who has KRB5 tokens needed to establish ssh auth, but it fails when running as a remote action in StackStorm as it tries ssh auth (with the default path of stanley ssh key -/home/stanley/.ssh/stanley_rsa
)The error comes internally from
st2common/runners/paramiko_ssh.py
when it fails to connect to the hosts via ssh (since the sshkey is missing or doesn't work).I tried adding the parameter
gss_auth = True
to ParamikoSSHClient as per Paramiko Docs but that doesn't seem to resolve the issue either (the ssh connection fails).Has anyone tried using KRB5 auth and set it up for StackStorm user?
Beta Was this translation helpful? Give feedback.
All reactions