[JIRA] (OVIRT-1694) puppet fails to set up sudo on CentOS 7.4

[Evgheni Dereveanchin (oVirt JIRA)]

Evgheni Dereveanchin created OVIRT-1694:
-------------------------------------------

             Summary: puppet fails to set up sudo on CentOS 7.4
                 Key: OVIRT-1694
                 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1694
             Project: oVirt - virtualization made easy
          Issue Type: Bug
          Components: Hosting
            Reporter: Evgheni Dereveanchin
            Assignee: infra


puppet is unable to configure sudo on newly provisioned CentOS 7.4 systems due to changes in /etc/sudoers that augeas cannot parse:

Debug: Augeas[Allow sudo ederevea](provider=augeas): Augeas version 1.4.0 is installed
Warning: Augeas[Allow sudo ederevea](provider=augeas): Loading failed for one or more files, see debug for /augeas//error output
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error = parse_failed
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/pos = 2308
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/line = 65
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/char = 12
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/lens = /usr/share/augeas/lenses/dist/sudoers.aug:529.10-.70:
Debug: Augeas[Allow sudo ederevea](provider=augeas): /augeas/files/etc/sudoers/error/message = Iterated lens matched less than it should
Debug: Augeas[Allow sudo ederevea](provider=augeas): Will attempt to save and only run if files changed
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/user", "ederevea"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/host", "ALL"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command", "ALL"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command/runas_user", "root"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): sending command 'set' with params ["/files/etc/sudoers/spec[user = 'ederevea']/host_group/command/tag", "PASSWD"]
Debug: Augeas[Allow sudo ederevea](provider=augeas): Closed the augeas connection
Error: /Stage[main]/Ovirt_infra::User::Ederevea/Ovirt_infra::User[ederevea]/Augeas[Allow sudo ederevea]: Could not evaluate: Saving failed, see debug

commenting out the following line in /etc/sudoers fixes the issue:
Defaults    match_group_by_gid

The following version is installed:
augeas-libs-1.4.0-2.el7_4.1.x86_64



--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100065)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/infra/attachments/20171012/a169f941/attachment.html>