Plantage FAIL2BAN après installation PIWIGO

Mon serveur YunoHost

**Matériel : Brique Internet sans VPN
**Version de YunoHost : ** 11.2.4
J’ai accès à mon serveur : En SSH
Êtes-vous dans un contexte particulier ou avez-vous effectué des modifications particulières sur votre instance ? : non

Bonjour,

Le service fail2ban est arrêté. Il redémarre mais il s’arrête à nouveau systématiquement. Le log parle d’une absence de log de piwigo. Que faire ?

Bien à vous,

Q

Les logs

Bonjour,

En allant dans /etc/fail2ban/jail.d/, j’ai vu qu’il y avait un fichier conf pour piwigo. L’un des paramètres concerne en effet le fichier de log : logpath = /var/log/piwigoFailedLogins.log.

Ce fichier n’existant pas je l’ai créé avec comme permissions root:root, 400.

J’ai relancé le service ‘fail2ban’ il y a 5 minutes maintenant. Ca semble tenir.

Je vais essayer de réinstaller webApp pour mes autres problèmes.

A suivre…

Bien à vous,

Q

PS : Ce problème d’installation de PIWIGO est-il connu ? Le fichier log de piwigo manque dans /var/log et fait planter FAIL2BAN.

Bonjour,

Selon le code https://github.com/YunoHost-Apps/piwigo_ynh/blob/1cac04c39ba70cef6571bcb9ae4afca5ccb48ca7/scripts/install#L243-L244, le fichier est censé être créé (mais avec les permissions $app:$app).

Peux-tu partager ton journal d’installation de Piwigo et l’erreur complète de Fail2ban? (cf. ton autre fil ou tu cries ton désespoir: pour qu’on t’aide efficacement, prend le réflexe de partager les fichiers journaux complets et non reformulés).

Bonjour,

J’ai pas trouvé de journaux pour l’installation de PIWIGO ?!
Pour l’erreur FAIL2BAN, voici le lien.

D’après la doc. je devrais donc modifier les permissions en piwigo:piwigo ?

Bien à vous,

Q

Malheureusement le journal de Fail2ban ne remonte pas assez haut. Peux-tu essayer d’extraire l’erreur à propos de /var/log/piwigoFailedLogins.log en faisant tail -n 200 /var/log/fail2ban.log (pour 200 lignes avant la fin, à ajuster si besoin)

Même pas dans ta webadmin, section Outils > Journaux ?

Oui c’est là que j’ai regardé. Dans webadmin, section Outils > Journaux.

Voilà les 200 dernières ligne de fail2ban.log

2023-10-23 06:33:00,647 fail2ban.server         [5291]: INFO    Starting Fail2ban v0.11.2
2023-10-23 06:33:00,652 fail2ban.observer       [5291]: INFO    Observer start...
2023-10-23 06:33:00,691 fail2ban.database       [5291]: INFO    Connected to fail2ban persistent database '/var/lib/fail2ban/fail2ban.sqlite3'
2023-10-23 06:33:00,702 fail2ban.jail           [5291]: INFO    Creating new jail 'sshd'
2023-10-23 06:33:00,900 fail2ban.jail           [5291]: INFO    Jail 'sshd' uses pyinotify {}
2023-10-23 06:33:00,933 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:00,952 fail2ban.filter         [5291]: INFO      maxLines: 1
2023-10-23 06:33:01,206 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,207 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,209 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,211 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,217 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/auth.log' (pos = 0, hash = 0fe558633dd87bf10777098032c72ea6e4570f78)
2023-10-23 06:33:01,223 fail2ban.jail           [5291]: INFO    Creating new jail 'nginx-http-auth'
2023-10-23 06:33:01,225 fail2ban.jail           [5291]: INFO    Jail 'nginx-http-auth' uses pyinotify {}
2023-10-23 06:33:01,256 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,274 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,276 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,278 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,279 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,282 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/lesmegeresdelhumus.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,286 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/admin.sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,290 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/xmpp-upload.sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,294 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,297 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/error.log' (pos = 0, hash = 025cbdd3224114ee8a1a011c27910a0e432155de)
2023-10-23 06:33:01,301 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/webmail.lesmegeresdelhumus.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,305 fail2ban.jail           [5291]: INFO    Creating new jail 'postfix'
2023-10-23 06:33:01,306 fail2ban.jail           [5291]: INFO    Jail 'postfix' uses pyinotify {}
2023-10-23 06:33:01,338 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,424 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,426 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,428 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,430 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,433 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/mail.log' (pos = 0, hash = 78e282358c8aa2bece1bfa729387743c3abc4573)
2023-10-23 06:33:01,438 fail2ban.jail           [5291]: INFO    Creating new jail 'dovecot'
2023-10-23 06:33:01,440 fail2ban.jail           [5291]: INFO    Jail 'dovecot' uses pyinotify {}
2023-10-23 06:33:01,474 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,545 fail2ban.datedetector   [5291]: INFO      date pattern `''`: `{^LN-BEG}TAI64N`
2023-10-23 06:33:01,547 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,548 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,550 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,551 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,553 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/mail.log' (pos = 0, hash = 78e282358c8aa2bece1bfa729387743c3abc4573)
2023-10-23 06:33:01,561 fail2ban.jail           [5291]: INFO    Creating new jail 'recidive'
2023-10-23 06:33:01,562 fail2ban.jail           [5291]: INFO    Jail 'recidive' uses pyinotify {}
2023-10-23 06:33:01,591 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,645 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,647 fail2ban.filter         [5291]: INFO      findtime: 86400
2023-10-23 06:33:01,649 fail2ban.actions        [5291]: INFO      banTime: 604800
2023-10-23 06:33:01,651 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,654 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/fail2ban.log' (pos = 0, hash = 657163b803f958063b7a8700d2ba81a24b998ed7)
2023-10-23 06:33:01,661 fail2ban.jail           [5291]: INFO    Creating new jail 'pam-generic'
2023-10-23 06:33:01,662 fail2ban.jail           [5291]: INFO    Jail 'pam-generic' uses pyinotify {}
2023-10-23 06:33:01,693 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,718 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:01,720 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,722 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,723 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,725 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/auth.log' (pos = 0, hash = 0fe558633dd87bf10777098032c72ea6e4570f78)
2023-10-23 06:33:01,729 fail2ban.jail           [5291]: INFO    Creating new jail 'dotclear2'
2023-10-23 06:33:01,730 fail2ban.jail           [5291]: INFO    Jail 'dotclear2' uses pyinotify {}
2023-10-23 06:33:01,756 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,770 fail2ban.filter         [5291]: INFO      maxRetry: 3
2023-10-23 06:33:01,771 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,773 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,774 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,776 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,780 fail2ban.jail           [5291]: INFO    Creating new jail 'nextcloud'
2023-10-23 06:33:01,781 fail2ban.jail           [5291]: INFO    Jail 'nextcloud' uses pyinotify {}
2023-10-23 06:33:01,807 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,819 fail2ban.filter         [5291]: INFO      maxRetry: 5
2023-10-23 06:33:01,821 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,822 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,823 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,826 fail2ban.filter         [5291]: INFO    Added logfile: '/home/yunohost.app/nextcloud/data/nextcloud.log' (pos = 126992, hash = 1ca18d98ae2d12e596b39312bfd9a76bf4cd55bc)
2023-10-23 06:33:01,830 fail2ban.jail           [5291]: INFO    Creating new jail 'piwigo'
2023-10-23 06:33:01,831 fail2ban.jail           [5291]: INFO    Jail 'piwigo' uses pyinotify {}
2023-10-23 06:33:01,858 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,868 fail2ban.filter         [5291]: INFO      maxRetry: 6
2023-10-23 06:33:01,870 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,871 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,873 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,878 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/piwigoFailedLogins.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:01,882 fail2ban.jail           [5291]: INFO    Creating new jail 'sasl'
2023-10-23 06:33:01,884 fail2ban.jail           [5291]: INFO    Jail 'sasl' uses pyinotify {}
2023-10-23 06:33:01,910 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:01,935 fail2ban.filter         [5291]: INFO      maxRetry: 5
2023-10-23 06:33:01,937 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:01,939 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:01,941 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:01,943 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/mail.log' (pos = 0, hash = 78e282358c8aa2bece1bfa729387743c3abc4573)
2023-10-23 06:33:01,947 fail2ban.jail           [5291]: INFO    Creating new jail 'yunohost'
2023-10-23 06:33:01,948 fail2ban.jail           [5291]: INFO    Jail 'yunohost' uses pyinotify {}
2023-10-23 06:33:01,980 fail2ban.jail           [5291]: INFO    Initiated 'pyinotify' backend
2023-10-23 06:33:02,004 fail2ban.filter         [5291]: INFO      maxRetry: 10
2023-10-23 06:33:02,007 fail2ban.filter         [5291]: INFO      findtime: 600
2023-10-23 06:33:02,008 fail2ban.actions        [5291]: INFO      banTime: 600
2023-10-23 06:33:02,010 fail2ban.filter         [5291]: INFO      encoding: UTF-8
2023-10-23 06:33:02,013 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/lesmegeresdelhumus.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,016 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/admin.sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,020 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/xmpp-upload.sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,023 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/sante9naturel.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,026 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/error.log' (pos = 0, hash = 025cbdd3224114ee8a1a011c27910a0e432155de)
2023-10-23 06:33:02,030 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/webmail.lesmegeresdelhumus.fr-error.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,033 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/admin.sante9naturel.fr-access.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,036 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/webmail.lesmegeresdelhumus.fr-access.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,040 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/access.log' (pos = 0, hash = cbad48482e4fa0e13fc57c079598d2832b67c168)
2023-10-23 06:33:02,043 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/xmpp-upload.sante9naturel.fr-access.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,046 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/sante9naturel.fr-access.log' (pos = 0, hash = d7d56c70ee52c553c4a4876c01b35cf9147d74d3)
2023-10-23 06:33:02,050 fail2ban.filter         [5291]: INFO    Added logfile: '/var/log/nginx/lesmegeresdelhumus.fr-access.log' (pos = 0, hash = da39a3ee5e6b4b0d3255bfef95601890afd80709)
2023-10-23 06:33:02,085 fail2ban.jail           [5291]: INFO    Jail 'sshd' started
2023-10-23 06:33:02,115 fail2ban.jail           [5291]: INFO    Jail 'nginx-http-auth' started
2023-10-23 06:33:02,147 fail2ban.jail           [5291]: INFO    Jail 'postfix' started
2023-10-23 06:33:02,171 fail2ban.jail           [5291]: INFO    Jail 'dovecot' started
2023-10-23 06:33:02,207 fail2ban.jail           [5291]: INFO    Jail 'recidive' started
2023-10-23 06:33:02,261 fail2ban.jail           [5291]: INFO    Jail 'pam-generic' started
2023-10-23 06:33:02,303 fail2ban.jail           [5291]: INFO    Jail 'dotclear2' started
2023-10-23 06:33:02,332 fail2ban.jail           [5291]: INFO    Jail 'nextcloud' started
2023-10-23 06:33:02,458 fail2ban.jail           [5291]: INFO    Jail 'piwigo' started
2023-10-23 06:33:02,486 fail2ban.jail           [5291]: INFO    Jail 'sasl' started
2023-10-23 06:33:02,502 fail2ban.jail           [5291]: INFO    Jail 'yunohost' started
2023-10-23 09:11:20,933 fail2ban.filter         [5291]: INFO    [postfix] Found 185.225.75.223 - 2023-10-23 09:11:20
2023-10-23 11:13:44,408 fail2ban.filter         [5291]: INFO    [postfix] Found 45.66.230.40 - 2023-10-23 11:13:44
2023-10-23 11:13:44,548 fail2ban.filter         [5291]: INFO    [postfix] Found 45.66.230.40 - 2023-10-23 11:13:44
2023-10-23 12:12:32,813 fail2ban.filter         [5291]: INFO    [postfix] Found 147.78.103.183 - 2023-10-23 12:12:32
2023-10-23 14:15:45,341 fail2ban.filter         [5291]: INFO    [postfix] Found 45.12.253.191 - 2023-10-23 14:15:45
2023-10-23 14:15:45,474 fail2ban.filter         [5291]: INFO    [postfix] Found 45.12.253.191 - 2023-10-23 14:15:45```

Bonjour tituspijean,

Si besoin je peux fournir des infos. si nécessaire. N’hésitez pas à me solliciter.

Bien à vous,

Q

Hélas les 200 lignes ne sont pas suffisantes. Il faudra augmenter le nombre pour retrouver l’erreur sur piwigoFailedLogins.log. J’essaierai de reproduire l’erreur aussi ce soir.

Ce matin le service fail2ban était encore arrêté. Voir ce ticket..

Le fichier /var/log/piwifoFailedLogins.log avait disparu.

Comme je l’avais créé en root:root, je l’ai recréé en piwigo;piwigo comme vous me l’avez indiqué.

Le service fail2ban a l’air de tenir maintenant. Cela fait deux heures qu’il tourne sans arrêt.

Le fichier /var/log/piwigoFailedLogins.log est toujours présent et vide.

Voilà ce que je peux dire pour l’instant.

Bien à vous,

Q

Ajoutons ça à la pile des mystères insolubles…

Piwigo est installée sur mon serveur depuis 4 jours, avec plusieurs essais d’authentification (échouant volontairement, ou avec succès), et je n’ai aucun problème avec /var/log/piwigoFailedLogins.log ou Fail2Ban.

Bonjour et merci pour votre réponse tituspijean,

J’ai pu pour ma part régler le problème en créant /var/log/piwigoFailedLogins.log à la main, en mettant les permissions à piwigo:piwigo puis en relançant fail2ban qui était arrêté.

Depuis cela tourne également sans problème.

Bien à vous,

Q

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.