PH10461: When using BYO SSH keys, starting a collective controller keeps appending the ssh key to the authorized_keys file.

20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5

APAR status

• Closed as program error.

Error description

• When using BYO ssh keys, starting a collective controller
  keeps appending the ssh key to the authorized_keys file.
  

Local fix

• None
  -
  Keywords: Wpl liberty controller
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty collectives configured with  *
  *                  BYO SSH keys                                *
  ****************************************************************
  * PROBLEM DESCRIPTION: When using a "bring your own" SSH key,  *
  *                      multiple copies of the key can be       *
  *                      appended to the authorized_keys file.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When using a "bring your own" SSH key, the key will get appended
  to the authorized_keys file every time a collective controller
  is started, even if the key already exists in the file.
  

Problem conclusion

• The code was updated to ensure the authorized_keys file is not
  appended if it already has a reference to the key.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 20.0.0.2.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

• As a workaround, ensure there are no leading (or trailing)
  spaces in the SSH public key file.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• RCD0 PSY

     UP