#11 is marked as wontfix because updating Augeas (or even simply backporting the lens) fixes the issue, so I wouldn't want to maintain a duplicated lens in this project.

There are updated Augeas RPMs available, and you can also ship the updated lens in your own profile module if that's easier for you.

from puppet-augeasproviders_ssh.

There should be an update to Augeas 1.4.0 in EL7.2 (preview), however it'll need a change to the lens name in the provider to work. We could do this by calling parsed_as? and checking if the Sshd_140.lns lens exists? (If you're happy for keeping this in the module for EL7.)

from puppet-augeasproviders_ssh.

I have the same issue but an update of augeas-libs to 1.4.0 didn't fix it

cat /etc/centos-release

CentOS Linux release 7.1.1503 (Core)

rpm -qa | grep -i augeas

ruby-augeas-0.5.0-1.el7.x86_64
augeas-libs-1.4.0-0.1.preview.el7.centos.x86_64

from puppet-augeasproviders_ssh.

Can you post the debug logs?

from puppet-augeasproviders_ssh.

Debug: Finishing transaction 30307000
Debug: Loaded state in 0.00 seconds
Debug: Loaded state in 0.00 seconds
Info: Applying configuration version '1444551318'
Notice: /Stage[main]/Main/Sshd_config[Ciphers]/ensure: created
Debug: Puppet::Type::Sshd_config::ProviderAugeas: Save failure details:
/augeas/files/root/sshd_config_test/error/path = /files/root/sshd_config_test
/augeas/files/root/sshd_config_test/error/lens = /usr/share/augeas/lenses/dist/sshd.aug:123.12-125.36:
/augeas/files/root/sshd_config_test/error/message = Failed to match 
    (    { /#comment/ = /[^\001-\004\t\n\r ][^\001-\004\n]*[^\001-\004\t\n\r ]|[^\001-\004\t\n\r ]/ }
      | { }
      | { /AcceptEnv/ }
      | { /AllowGroups/ }
      | { /AllowUsers/ }
      | { /DenyGroups/ }
      | { /Subsystem/ }
      | { /DenyUsers/ }
      | { /MACs/ }
      | { /AcceptEn((v[0-9A-Za-z]|[0-9A-Za-uw-z])[0-9A-Za-z]*|)|AcceptE([0-9A-Za-mo-z][0-9A-Za-z]*|)|Accept([0-9A-DF-Za-z][0-9A-Za-z]*|)|Accep([0-9A-Za-su-z][0-9A-Za-z]*|)|Acce([0-9A-Za-oq-z][0-9A-Za-z]*|)|Acc([0-9A-Za-df-z][0-9A-Za-z]*|)|Allow(Group((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Grou([0-9A-Za-oq-z][0-9A-Za-z]*|)|Gro([0-9A-Za-tv-z][0-9A-Za-z]*|)|Gr([0-9A-Za-np-z][0-9A-Za-z]*|)|User((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Use([0-9A-Za-qs-z][0-9A-Za-z]*|)|Us([0-9A-Za-df-z][0-9A-Za-z]*|)|U([0-9A-Za-rt-z][0-9A-Za-z]*|)|G([0-9A-Za-qs-z][0-9A-Za-z]*|)|[0-9A-FH-TV-Za-z][0-9A-Za-z]*|)|Allo([0-9A-Za-vx-z][0-9A-Za-z]*|)|All([0-9A-Za-np-z][0-9A-Za-z]*|)|Al([0-9A-Za-km-z][0-9A-Za-z]*|)|Ac([0-9A-Zabd-z][0-9A-Za-z]*|)|DenyGroup((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|DenyGrou([0-9A-Za-oq-z][0-9A-Za-z]*|)|DenyGro([0-9A-Za-tv-z][0-9A-Za-z]*|)|DenyGr([0-9A-Za-np-z][0-9A-Za-z]*|)|DenyUser((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|DenyUse([0-9A-Za-qs-z][0-9A-Za-z]*|)|DenyUs([0-9A-Za-df-z][0-9A-Za-z]*|)|DenyU([0-9A-Za-rt-z][0-9A-Za-z]*|)|DenyG([0-9A-Za-qs-z][0-9A-Za-z]*|)|Deny([0-9A-FH-TV-Za-z][0-9A-Za-z]*|)|Den([0-9A-Za-xz][0-9A-Za-z]*|)|De([0-9A-Za-mo-z][0-9A-Za-z]*|)|MAC((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Matc((h[0-9A-Za-z]|[0-9A-Za-gi-z])[0-9A-Za-z]*|)|Mat([0-9A-Zabd-z][0-9A-Za-z]*|)|Ma([0-9A-Za-su-z][0-9A-Za-z]*|)|MA([0-9ABD-Za-z][0-9A-Za-z]*|)|Subsyste((m[0-9A-Za-z]|[0-9A-Za-ln-z])[0-9A-Za-z]*|)|Subsyst([0-9A-Za-df-z][0-9A-Za-z]*|)|Subsys([0-9A-Za-su-z][0-9A-Za-z]*|)|Subsy([0-9A-Za-rt-z][0-9A-Za-z]*|)|Subs([0-9A-Za-xz][0-9A-Za-z]*|)|Sub([0-9A-Za-rt-z][0-9A-Za-z]*|)|Su([0-9A-Zac-z][0-9A-Za-z]*|)|(S[0-9A-Za-tv-z]|M[0-9B-Zb-z]|D[0-9A-Za-df-z]|A[0-9A-Zabd-km-z]|[0-9BCE-LN-RT-Za-z][0-9A-Za-z])[0-9A-Za-z]*|S|M|D|A|[0-9BCE-LN-RT-Za-z]/ = /[^\001-\004\t\n ]+([\t ]+[^\001-\004\t\n ]+)*/ })*
    { /Match/ }*
  with tree
    { "#comment" = "this is a test" } { "Protocol" = "2" } { "Ciphers" }
Error: /Stage[main]/Main/Sshd_config[Ciphers]: Could not evaluate: Failed to save Augeas tree to file. See debug logs for details.
Debug: Finishing transaction 22053940
Debug: Storing state
Debug: Stored state in 0.02 seconds
Notice: Finished catalog run in 0.11 seconds
Debug: Using settings: adding file resource 'rrddir': 'File[/var/lib/puppet/rrd]{:path=>"/var/lib/puppet/rrd", :mode=>"750", :owner=>"puppet", :group=>"puppet", :ensure=>:directory, :loglevel=>:debug, :links=>:follow, :backup=>false}'
Debug: /File[/var/lib/puppet/rrd]/seluser: Found seluser default 'system_u' for /var/lib/puppet/rrd
Debug: /File[/var/lib/puppet/rrd]/selrole: Found selrole default 'object_r' for /var/lib/puppet/rrd
Debug: /File[/var/lib/puppet/rrd]/seltype: Found seltype default 'puppet_var_lib_t' for /var/lib/puppet/rrd
Debug: /File[/var/lib/puppet/rrd]/selrange: Found selrange default 's0' for /var/lib/puppet/rrd
Debug: Finishing transaction 23001580

from puppet-augeasproviders_ssh.

And what's your sshd_config file like and your Puppet code?

from puppet-augeasproviders_ssh.

I copied the files from above to have the same example

from puppet-augeasproviders_ssh.

I have the same issue but an update of augeas-libs to 1.4.0 didn't fix it

augeas-libs-1.4.0-0.1.preview.el7.centos.x86_64

These preview RPMs (which are now released in 7.2) are not intended to change the Sshd module for compatibility with earlier EL7 versions. They instead supply a Sshd_140 lens which this module would need to load instead of Sshd.

from puppet-augeasproviders_ssh.

I don't understand what needs to be done. Update augeas-libs to 1.4.x?

from puppet-augeasproviders_ssh.

Related: #11

I also posted a work-around on the link above.

from puppet-augeasproviders_ssh.