cis_security_hardening::rules::pam_old_passwords on ubuntu-22.04-x86_64 with enforce = true is expected to contain Pam[ubuntu-remember-old-pw] with ensure => "present", service => "common-password", type => "password", control => "[success=1 default=ignore]", control_is_param => true, module => "pam_unix.so", arguments => ["obscure", "use_authok", "try_first_pass", "yescrypt", "remember=5"] and position => "before *[type=\"password\" and module=\"pam_deny.so\"]" Failure/Error: is_expected.to contain_pam('ubuntu-remember-old-pw') .with( 'ensure' => 'present', 'service' => 'common-password', 'type' => 'password', 'control' => '[success=1 default=ignore]', 'control_is_param' => true, 'module' => 'pam_unix.so', 'arguments' => ['obscure', 'use_authok', 'try_first_pass', 'yescrypt', 'remember=5'], 'position' => 'before *[type="password" and module="pam_deny.so"]', expected that the catalogue would contain Pam[ubuntu-remember-old-pw] with control set to "[success=1 default=ignore]" but it is set to "requisite", and parameter control_is_param set to true but it is set to nil, and parameter module set to "pam_unix.so" but it is set to "pam_pwhistory.so", and parameter arguments set to ["obscure", "use_authok", "try_first_pass", "yescrypt", "remember=5"] but it is set to ["use_authtok", "remember=5"], and parameter position set to "before *[type=\"password\" and module=\"pam_deny.so\"]" but it is set to "before *[type=\"password\" and module=\"pam_unix.so\"]" Diff: @@ -1,18 +1,10 @@ -[success=1 default=ignore] +requisite -true +pam_pwhistory.so -pam_unix.so +use_authtok -obscure - -use_authok - -try_first_pass - -yescrypt - remember=5 -before *[type="password" and module="pam_deny.so"] +before *[type="password" and module="pam_unix.so"]

Process completed with exit code 1.

cis_security_hardening::rules::pam_old_passwords on ubuntu-22.04-x86_64 with enforce = true is expected to contain Pam[ubuntu-remember-old-pw] with ensure => "present", service => "common-password", type => "password", control => "[success=1 default=ignore]", control_is_param => true, module => "pam_unix.so", arguments => ["obscure", "use_authok", "try_first_pass", "yescrypt", "remember=5"] and position => "before *[type=\"password\" and module=\"pam_deny.so\"]" Failure/Error: is_expected.to contain_pam('ubuntu-remember-old-pw') .with( 'ensure' => 'present', 'service' => 'common-password', 'type' => 'password', 'control' => '[success=1 default=ignore]', 'control_is_param' => true, 'module' => 'pam_unix.so', 'arguments' => ['obscure', 'use_authok', 'try_first_pass', 'yescrypt', 'remember=5'], 'position' => 'before *[type="password" and module="pam_deny.so"]', expected that the catalogue would contain Pam[ubuntu-remember-old-pw] with control set to "[success=1 default=ignore]" but it is set to "requisite", and parameter control_is_param set to true but it is set to nil, and parameter module set to "pam_unix.so" but it is set to "pam_pwhistory.so", and parameter arguments set to ["obscure", "use_authok", "try_first_pass", "yescrypt", "remember=5"] but it is set to ["use_authtok", "remember=5"], and parameter position set to "before *[type=\"password\" and module=\"pam_deny.so\"]" but it is set to "before *[type=\"password\" and module=\"pam_unix.so\"]" Diff: @@ -1,18 +1,10 @@ -[success=1 default=ignore] +requisite -true +pam_pwhistory.so -pam_unix.so +use_authtok -obscure - -use_authok - -try_first_pass - -yescrypt - remember=5 -before *[type="password" and module="pam_deny.so"] +before *[type="password" and module="pam_unix.so"]