000034972 - "Augeas[sshd_config_X11Forwarding](provider=augeas)" error occurs while running puppet on RSA Security Analytics

Document created by RSA Customer Support Employee on Apr 28, 2017
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000034972
Applies ToRSA Product Set: Netwitness
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition:10.6.x 
Platform: CentOS
IssueBelow error comes while running puppet agent -t on Security Analytics Appliances
 
#puppet agent -t --debug
Debug: /Stage[main]/Rabbitmq/File[/etc/rabbitmq/rabbitmq-env.conf]: Autorequiring File[/etc/rabbitmq]
Info: Applying configuration version '1488436611'
Debug: Prefetching yum resources for package
Debug: Executing '/bin/rpm --version'
Debug: Executing '/bin/rpm -qa --nosignature --nodigest --qf '%{NAME} %|EPOCH?{%{EPOCH}}:{0}| %{VERSION} %{RELEASE} %{ARCH}\n''
Debug: Executing '/sbin/service sshd status'
Debug: Executing '/sbin/chkconfig sshd'
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): Opening augeas with root /, lens path , flags 32
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): Augeas version 1.0.0 is installed
Warning: Augeas[sshd_config_X11Forwarding](provider=augeas): Loading failed for one or more files, see debug for /augeas//error output
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error = parse_failed
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error/pos = 1127
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error/line = 42
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error/char = 0
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error/lens = /usr/share/augeas/lenses/dist/sshd.aug:123.12-125.36:
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): /augeas/files/etc/ssh/sshd_config/error/message = Get did not match entire input
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): Will attempt to save and only run if files changed
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): sending command 'set' with params ["/files/etc/ssh/sshd_config/X11Forwarding", "no"]
Debug: Augeas[sshd_config_X11Forwarding](provider=augeas): Closed the augeas connection
Error: /Stage[main]/Ssh/Augeas[sshd_config_X11Forwarding]: Could not evaluate: Saving failed, see debug
Debug: Failed to load library 'msgpack' for feature 'msgpack'
Debug: Puppet::Network::Format[msgpack]: feature msgpack is missing
Debug: file_metadata supports formats: pson yaml b64_zlib_yaml raw
Debug: Using cached connection for https://puppetmaster.local:8140
Debug: Caching connection for https://puppetmaster.local:8140
Debug: Exec[fix-ssh](provider=posix): Executing '/etc/puppet/scripts/sshdcnf.py'
Debug: Executing '/etc/puppet/scripts/sshdcnf.py'
Notice: /Stage[main]/Ssh/Exec[fix-ssh]/returns: executed successfully
ResolutionFollow the below steps to fix this issue:-
1. SSH to appliance.
2. Edit the below file.
#vi /etc/ssh/sshd_config
Modify "set X11 Forwarding Yes"  to "set X11 Forwarding no".
3. Make sure to have no extra space in this file. "#puppet agent -t --debug" would tell the line number in case of any issues. 
Note: We can also replace the file with any of the other device's file which is not running Log collector.
4. Restart below services.
#service puppet restart
#service sshd restart
5. Run puppet agent -t and make sure it is running without any errors now.  
 

Attachments

    Outcomes