Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-7395

Augeas unknown error - Matching path expression

    XMLWordPrintable

    Details

    • Template:
    • Team:
      Platform OS
    • Method Found:
      Needs Assessment
    • CS Priority:
      Reviewed
    • QA Risk Assessment:
      Needs Assessment

      Description

      Puppet Version: 4.10.9
      Puppet Server Version: 2.6.0
      OS Name/Version: AIX 7.1

      This issue arose from a support ticket where a customer experiences the following error during a puppet run on one of their AIX servers.

      Debug: Augeas[sshd_config](provider=augeas): Opening augeas with root /, lens path , flags 32 
      Debug: Augeas[sshd_config](provider=augeas): Augeas version 1.4.0 is installed 
      Debug: Augeas[sshd_config](provider=augeas): Closed the augeas connection 
      Error: /Stage[main]/Profiles::Pci_dss::Sshd_config/Augeas[sshd_config]: Could not evaluate: unknown error - Matching path expression '/augeas/load/*['/etc/ssh/sshd_config/' !~ glob(incl) + regexp('/.*')]' failed 
      

      This box was recently updated from puppet 4.7.0 to 4.10.9

      The piece of code causing this issue follows a straight forward sshd_config example from our documentation with some added DenyUser statements:

       augeas { 'sshd_config':
         lens => 'Sshd.lns',
         incl => '/files/etc/ssh/sshd_config',
         context => '/files/etc/ssh/sshd_config',
         changes => [
           'set PermitRootLogin no',
           'set Protocol 2',
           'set Banner /etc/qvc_sshd_banner',
           'set DenyUsers/1 lp',
           'set DenyUsers/2 ipsec',
           'set DenyUsers/3 nobody',
           'set DenyUsers/4 invscout',
           'set DenyUsers/5 lpd',
         ],
         notify  => Service[$sshd_service]
       }
      

      The same code being applied to other AIX boxes causes no issues.

       

       

       

        Attachments

          Activity

            People

            Assignee:
            patrick.grant Patrick Grant
            Reporter:
            patrick.grant Patrick Grant
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Zendesk Support