Password protected network ssh credentials don't work

[chrismeyersfsu]

ISSUE TYPE

• Bug Report

COMPONENT NAME

• API

SUMMARY

STEPS TO REPRODUCE

We are going to use a network credential as if it was a machine credential. Network module usage looks like:

  - name: Retrieving full config from devices
    juniper_junos_config:
      host: '{{ inventory_hostname }}'
      user: 'netscript'
      ssh_private_key_file: '~/.ssh/test_key'
      port: 830
      timeout: 300
      format: text
      return_output: false
      retrieve: committed
      dest_dir: "output/"

• Create a password protected ssh key
• Add the public key to authorized_key on a host accessible by tower
• Create an inventory w/ the host accessible by tower in it
• Create a network cred that uses the ssh key and unlock password
• Create a JT that uses the network credential and this playbook https://github.com/chrismeyersfsu/ansible-examples/blob/master/ssh_key_file/main.yml
• Run the JT

EXPECTED RESULTS

• Playbook to succeed

ACTUAL RESULTS

• Job fails when it runs it's first task, gathering facts

ADDITIONAL INFORMATION

For password protected network credentials, (1) we aren't telling pexpect to "fill in the password". Job templates can't, effectively, use two password protected ssh keys and (2) we aren't protecting the user from assigning a network cred and machine cred with this case.

TASK [Gathering Facts] *********************************************************
Enter passphrase for key '/tmp/awx_479_KUdnKp/tmpwplXmU': 
fatal: [cmeyershost]: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).\r\n", "unreachable": true}

[ryanpetrello]

@chrismeyersfsu this ready to close?

[chrismeyersfsu]

@ryanpetrello I'm still shameless poking Daniel on the mailing list to see if this fix works for him. Our QE team tested the fix and passed. https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/awx-project/ce95ooS2sp0/OwEzOmwcDgAJ

[ryanpetrello]

Okay, sounds good 👍