Jira (PUP-9504) Bundled augeas fails to parse CentOS 7.6 default /etc/sudoers

[Ryan White (JIRA)]

Title: Message Title

Ryan White created an issue   Puppet / PUP-9504 Bundled augeas fails to parse CentOS 7.6 default /etc/sudoers Issue Type: Bug Affects Versions: PUP 6.2.0, PUP 5.5.10 Assignee: Unassigned Components: AIO Created: 2019/02/19 2:21 PM Environment: OS: CentOS 7.6 Puppet Agent AIO 5.5.10, 6.2.0 sudo-1.8.23-3.el7.x86_64   I would guess it should be possible to reproduce with a plain CentOS 7.6 VM, but I haven't tried. The issue does affect a couple servers I have laying around in a dev environment. Priority: Normal Reporter: Ryan White During a puppet run, on CentOS 7.6 hosts, a warning appears: Warning: Augeas[sudo/requiretty](provider=augeas): Loading failed for one or more files, see debug for /augeas//error output The relevant excerpt from augtool is $ /opt/puppetlabs/puppet/bin/augtool errors ... Error in /etc/sudoers:73.12 (parse_failed) Iterated lens matched less than it should Lens: /opt/puppetlabs/puppet/share/augeas/lenses/dist/sudoers.aug:537.10-.70: Last matched: /opt/puppetlabs/puppet/share/augeas/lenses/dist/sep.aug:47.18-.40: Next (no match): /opt/puppetlabs/puppet/share/augeas/lenses/dist/sudoers.aug:419.23-420.57: Line 73, col 12 is `always_query_group_plugin`: $ nl -b a /etc/sudoers 67 # Prior to version 1.8.15, groups listed in sudoers that were not 68 # found in the system group database were passed to the group 69 # plugin, if any. Starting with 1.8.15, only groups of the form 70 # %:group are resolved via the group plugin by default. 71 # We enable always_query_group_plugin to restore old behavior. 72 # Disable this option for new behavior. 73 Defaults always_query_group_plugin 74 This appears to be the same issue described at https://bugzilla.redhat.com/show_bug.cgi?id=1649287 which is patched upstream: https://github.com/hercules-team/augeas/pull/588/files, but not yet released. It looks like some other patches are applied to the vendored augeas (https://github.com/puppetlabs/puppet-runtime/tree/1838c5c9e29923a0eb1042a8fbbf39ad838006d2/resources/patches/augeas ), but it wasn't obvious how to test my patch if I were to submit a PR. Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.