Forced command in ssh key with absolute path does not work

[arvatoth-vcc]

Describe the Bug

Force command with full path does not work in ssh key.

Expected Behavior

When I would like to add a forced command with full path to the script, I got back Unmatched double quote raised exception. Please look example below.

Steps to Reproduce

Steps to reproduce the behavior:

  accounts::user { 'testuser':
    ensure      => present,
    group       => 'nogroup',
    shell       => '/bin/bash',
    managehome  => true,
    home_mode   => '0700',
    sshkeys     => [
      'no-port-forwarding,no-x11-forwarding,no-agent-forwarding,command="/usr/local/bin/test-script.sh" ssh-rsa AAAAB3NzaC1yc2EAAAADA........u7wbFJn testuser@localhost'
    ],
  }

Environment

• Puppet Agent version v7.20.0
• puppetlabs-accounts version v7.3.0
• Platform Ubuntu 22.04

Additional Context

If I skip per (/) sign from value of command, there is no error, but full absolute path is mandatory for forced command.

[david22swan]

@arvatoth-vcc Just taking a quick look, but could you try adding a backslash to the start of the double quotes, i.e.:
'no-port-forwarding,no-x11-forwarding,no-agent-forwarding,command=\"/usr/local/bin/test-script.sh\" ssh-rsa AAAAB3NzaC1yc2EAAAADA........u7wbFJn testuser@localhost'
There may just be some confusion in how the string is being processed

[arvatoth-vcc]

Hi @david22swan, thank you for your response. I have tried with backstashed quote sign (as you wrote), but does not work. I got another error:

Error: Parameter type failed on Ssh_authorized_key[testuser_test-script.sh\"_AAAAB3NzaC1yc2EAAAADA........u7wbFJn_566d91093c50e9c80ddda2d305962bb7]: Invalid value "test-script.sh\\\"". Valid values are ssh-dss, ssh-rsa, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521, ssh-ed25519, sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com, ssh-rsa-cert-v01@openssh.com, ssh-ed25519-cert-v01@openssh.com, ssh-dss-cert-v01@openssh.com, ecdsa-sha2-nistp256-cert-v01@openssh.com, ecdsa-sha2-nistp384-cert-v01@openssh.com, ecdsa-sha2-nistp521-cert-v01@openssh.com. 

Of course I wrote only one backslash char to the pp file.