Bug 1048842

Summary:	Fence agent uses key authentication when it should use password
Product:	Red Hat Enterprise Linux 6	Reporter:	Marek Grac <mgrac>
Component:	fence-agents	Assignee:	Marek Grac <mgrac>
Status:	CLOSED ERRATA	QA Contact:	Cluster QE <mspqa-list>
Severity:	medium	Docs Contact:
Priority:	low
Version:	6.4	CC:	cluster-maint, jharriga, mjuricek, rbalakri
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	fence-agents-3.1.5-40.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1048843 (view as bug list)		Environment:
Last Closed:	2014-10-14 07:49:14 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1048843

Description Marek Grac 2014-01-06 12:34:40 UTC

Description of problem:

When fence agent is used with --password, key-based authentication is done before (based on default configuration file). If it succeed then fencing fails because it waits for 'ssword:' line

Unit test:

git clone https://github.com/saironiq/mitmproxy.git 
cd mitmproxy 
./mitmproxy_ssh -H apc-pdu-01.cluster-qe.lab.eng.brq.redhat.com -D 

in different window on same computer:
fence_apc -o status -x -a localhost -u 2222 -l apc -p apc -n 1 --ssh-options="-2" --login-timeout=100 

-- before patch -> unable to login
-- after patch -> status is returned

Comment 1 Marek Grac 2014-01-06 12:36:09 UTC

Patch is in the upstream:

https://git.fedorahosted.org/cgit/fence-agents.git/commit/?id=cfd1f7490d7958ee25ad5937c9f2072adaa9862e

Comment 4 errata-xmlrpc 2014-10-14 07:49:14 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1562.html