canonical / canonical/cloud-init

"ssh_pwauth" always true on CloudStack datasource with password

Open
#3,113 4 comments 0 reactions 0 assignees View on GitHub
bug launchpad
Dominant language
Python
Stars
3.8k
Forks
1.1k
Avg merge
2d 23h
Merged PRs (30d)
18

Description

This bug was originally filed in Launchpad as [LP: #1747705](https://bugs.launchpad.net/cloud-init/+bug/1747705)

Launchpad details

affected_projects = ['cloud-init (Ubuntu)']

assignee = None
assignee_name = None
date_closed = None
date_created = 2018-02-06T16:15:29.170756+00:00
date_fix_committed = None
date_fix_released = None
id = 1747705
importance = medium
is_complete = False
lp_url = https://bugs.launchpad.net/cloud-init/+bug/1747705
milestone = None
owner = shota-a
owner_name = Shota Aratono
private = False
status = confirmed
submitter = shota-a
submitter_name = Shota Aratono
tags = []
duplicates = []

_Launchpad user **Shota Aratono(shota-a)** wrote on 2018-02-06T16:15:29.170756+00:00_

ssh_pwauth is set forcefully to true when
- Using CloudStack datasource
- Using VM template supports password reset feature.

When cloud-init obtain password from virtual router, cloud-init set ssh_pwauth to true nevertheless originall ssh_pwauth value is No/unchanged.
I read the code and found this behavior is in https://github.com/cloud-init/cloud-init/blob/master/cloudinit/sources/DataSourceCloudStack.py#L148 .

I'd like to use password for only virtual console and forbid ssh password authentication.
The easiest solution is remove the code https://github.com/cloud-init/cloud-init/blob/master/cloudinit/sources/DataSourceCloudStack.py#L150 but I'm not sure about side effect.

How do you think this?
The version of cloud-init is 17.1-46-g7acc9e68-0ubuntu1~16.04.1, on ubuntu 16.04.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.