Bug 2108637

Summary: Remote execution fails for SSH Default when Remote Execution configured for Kerberos Authentication
Product: Red Hat Satellite Reporter: Paul Armstrong <parmstro>
Component: Ansible - Configuration ManagementAssignee: Adam Ruzicka <aruzicka>
Status: CLOSED ERRATA QA Contact: Sam Bible <sbible>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.11.0CC: ahumbe, aruzicka, bbuckingham, egolov, ldelouw, oezr, risantam, rlavi, zhunting
Target Milestone: 6.12.0Keywords: Regression, Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: smart_proxy_remote_execution_ssh-0.7.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-11-16 13:34:39 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Paul Armstrong 2022-07-19 15:05:07 UTC
Description of problem:
Remote execution succeeds for Ansible jobs but fails for SSH Default when Remote Execution configured for Kerberos Authentication

Version-Release number of selected component (if applicable):
6.11

How reproducible:
Always

Steps to Reproduce:
1. Upgrade to 6.11
2. Ensure Remote Execution is configured for Kerberos Auth as per documentation
3. Schedule Remote Execution - SSH Default command
4. echo "I am able to execute"

Actual results:
Fails

Error initializing command: RuntimeError - Unable to create directory on remote system /var/tmp/foreman-ssh-cmd-...40d: exit code: 255
ssh_exchange_identification: Connection closed by remote host
Exit status: EXCEPTION

Expected results:
succeeds

Additional info:
comment out ProxyCommand in /etc/ssh/ssh_config allows execution to succeed. 
This is not a desirable workaround.

see https://bugzilla.redhat.com/show_bug.cgi?id=1650103
per Adam Ruzicka

Comment 1 Paul Armstrong 2022-07-19 15:20:11 UTC
If you want me to test anything, let me know.

Comment 3 Ron Lavi 2022-07-28 11:25:17 UTC
Upstream PR got merged, moving to POST.

Comment 5 Adam Ruzicka 2022-09-12 08:10:48 UTC
*** Bug 2125700 has been marked as a duplicate of this bug. ***

Comment 6 Sam Bible 2022-09-25 23:06:53 UTC
Version-Release number of selected component (if applicable):
6.12.0 - 7

Steps to Reproduce:
1. Ensure Remote Execution is configured for Kerberos Auth as per documentation
2. Schedule a remote execution job with a simple output on host

Actual results:
Succeeds

Expected results:
Succeeds

Comment 10 errata-xmlrpc 2022-11-16 13:34:39 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.12 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8506