`/etc/conjur.identity` cannot be used as a replacement for `~/.netrc`

[whip113]

Summary

The README.md says you can provide the values from ~/.netrc as /etc/conjur.identity, however this does not work.

Steps to Reproduce

Steps to reproduce the behavior:

1. Move the .netrc file to /etc/conjur.identity
2. Run something like summon my-app
3. You get an error that credential details haven't been provided

Expected Results

Summon should invoke my app with my secrets defined in secrets.yml

Actual Results (including error logs, if applicable)

Summon-conjur fails to authenticate

Reproducible

• [x] Always
• [ ] Sometimes
• [ ] Non-Reproducible

Version/Tag number

Latest version of summon-conjur

Environment setup

Included with the CLI container

Additional Information

To workaround the problem, add netrc_path: "/etc/conjur.identity" to the conjur.conf file (where .netrc > conjur.identity)

Duplicate of https://github.com/cyberark/conjur-api-go/issues/53

[sgnn7]

@whip113 Can you provide us with content of those two files (with sensitive data redacted)? I think that this may be a configuration issue. Can you also dump the output of echo $HOME?

[whip113]

The output of echo $HOME is /root. (I'm using summon and summon-conjur from within the CLI container) The content of /etc/conjur.identity is the same as ~/.netrc. I simply do mv ~/.netrc /etc/conjur.identity when starting from an initialized CLI. The content of /etc/conjur.conf is the same as ~/.conjurrc, I create it the same way I create the conjur.identity file. However, once I've done this, summon-conjur is unable to locate conjur.identity. You get an error "Failed creating a Conjur client: Environment variables and machine identity files satisfying at least one authentication strategy must be present!". Once the line netrc_path: "etc/conjur.identity" is added to the /etc/conjur.conf it then works.

Note: You can reproduce this same behavior with the CLI, except that with the CLI you get prompted to login.

[sgnn7]

This seems to be a duplicate of https://github.com/cyberark/conjur-api-go/issues/53

[sgnn7]

I've updated the issue info to reflect the actual problem