Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

puppet fails to set up sudo on CentOS 7.4

Description

puppet is unable to configure sudo on newly provisioned CentOS 7.4 systems due to changes in /etc/sudoers that augeas cannot parse:

Debug: Augeas[Allow sudo ederevea](provider=augeas): Augeas version 1.4.0 is installed
Warning: Augeas[Allow sudo ederevea](provider=augeas): Loading failed for one or more files, see debug for /augeas//error output
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error = parse_failed
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/pos = 2308
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/line = 65
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/char = 12
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/lens = /usr/share/augeas/lenses/dist/sudoers.aug:529.10-.70:
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/message = Iterated lens matched less than it should
Debug: Augeas[Allow sudo ederevea](provider=augeas): Will attempt to save and only run if files changed
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/user", "ederevea"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/host", "ALL"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command", "ALL"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command/runas_user", "root"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command/tag", "PASSWD"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): Closed the augeas connection
Error: /Stage[main]/Ovirt_infra::User::Ederevea/Ovirt_infra::User[ederevea]/Augeas[Allow sudo ederevea]: Could not evaluate: Saving failed, see debug

commenting out the following line in /etc/sudoers fixes the issue:
Defaults match_group_by_gid

The following version is installed:
augeas-libs-1.4.0-2.el7_4.1.x86_64

Activity

Show:

Eyal Edri December 26, 2017 at 12:23 PM

we're moving sudo to be done via global_setup.sh so this probably isn't needed

Won't Fix

Details

Assignee

Reporter

Components

Priority

Created October 12, 2017 at 12:20 PM
Updated December 4, 2018 at 2:21 PM
Resolved December 26, 2017 at 12:23 PM