code:
exec { "fail2banadd": <br>
command => '/bin/sed -i "/\[ssh\]/,/\[dropbear\]/ s/maxretry = 6/maxretry = 5/" /etc/fail2ban/jail.conf',<br>
}<br>
Error:
=> default: err: /Stage[main]//Exec[fail2banadd]/returns: change from notrun to 0 failed: /bin/sed -i "/[ssh]/,/[dropbear]/ s/maxretry = 6/maxretry = 5/" /etc/fail2ban/jail.conf returned 2 inste d of one of [0] at /tmp/vagrant-puppet-3/manifests/init.pp:76
Now output.
[ssh]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 6
[dropbear]
enabled = false
port = ssh
filter = sshd
logpath = /var/log/dropbear
maxretry = 6
Want this output.
[ssh]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 6
[dropbear]
enabled = false
port = ssh
filter = sshd
logpath = /var/log/dropbear
maxretry = 5
/etc/fail2ban/jail.conf
, and so returned a failure code of2
.Also, it seems that your code is selecting the wrong lines if you want to change themaxretry
outside of the lines from[ssh]
to[dropbear]
. – ooga Jul 29 '14 at 14:56sed
receives plain brackets, so your expressions become character classes. I think the approach is terrible. Have you looked at augeas? An inifile lense should get you there. – Felix Frank Jul 29 '14 at 19:54