Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1383256

Summary:	[RFE] Allow remote execution for non-root users
Product:	Red Hat Satellite	Reporter:	Barbora Vassova <bvassova>
Component:	Remote Execution	Assignee:	satellite6-bugs <satellite6-bugs>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2.0	CC:	bbuckingham, bvassova, inecas
Target Milestone:	Unspecified	Keywords:	FutureFeature, Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-11 15:35:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Barbora Vassova 2016-10-10 09:56:37 UTC

Business Case: 
Customer (due to security reasons) wants to have the PermitRootLogin parameter in /etc/ssh/sshd_config on a host machine set to false - however this disables remote execution, since even if effective user is a non-root user, Satellite connects to the root user on the client machine. Customer would like to have an option to remotely execute commands as a non-root user, completely avoiding using root. 

Technical Requirements:
PermitRootLogin parameter in /etc/ssh/sshd_config on a client machine could be set to false

Additional information: 
n/a

Comment 1 Brad Buckingham 2016-10-13 18:40:30 UTC

Bug 1376772 raises a similar concern.

Comment 4 references the following documentation:
https://access.redhat.com/documentation/en/red-hat-satellite/6.2/paged/host-configuration-guide/113-configuring-global-settings

Would that support the customer's need?

Comment 2 Barbora Vassova 2016-10-14 07:17:51 UTC

Afaik, no - the effective user option is only like a "mask" - it still connects to root. If you disable root login on host machine (which is what they want to do), remote execution will not work at all.

Comment 3 Ivan Necas 2016-10-17 16:23:04 UTC

There are two options there: remote_execution_ssh_user and remote_execution_effective_user. The `remote_execution_ssh_user` should allow to use non-root user for the remote execution. Can you confirm we are talking about this option?

Comment 4 Barbora Vassova 2016-11-11 15:35:40 UTC

The "remote_execution_ssh_user" option worked, thank you!