PH31732: Restricting ip access in ssh keys in authorized_keys, results in ssh key being appended when collective member is restarted.

APAR status

• Closed as program error.

Error description

• If a user restricts the ssh keys (by adding the
  'from=pattern' option) in the authorized_keys file, the ssh
  keys will be appended to the authorized_keys file when the
  collective member is restarted.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty collectives configured with  *
  *                  RXA and private SSH keys                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Restricting IP access for SSH keys in   *
  *                      the authorized_keys file results in the *
  *                      SSH key being appended when a           *
  *                      collective member is restarted.         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  If a user restricts the SSH keys (by adding the 'from=pattern'
  option) in the authorized_keys file, the SSH key will be
  appended to the authorized_keys file when the collective member
  is restarted.
  

Problem conclusion

• The code was modified to properly check if the keys, restricted
  or otherwise, are present in the authorized_keys file. If they
  are, there is no need to re-append them.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 21.0.0.1.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels