Owncloud fail2ban - Revision history

Daniel at 11:08, 24 May 2013

2013-05-24T11:08:27Z

← Older revision		Revision as of 11:08, 24 May 2013
Line 1:		Line 1:
	from [http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]		from [http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]

	To make OC write auth failures to a logfile, modify <tt> path/to/owncloud/lib/user/database.php</tt> and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:		To make OC write auth failures to a logfile, modify <tt> path/to/owncloud/lib/user/database.php</tt> and insert in ''public function checkPassword( $uid, $password )'' (~line 202) - just before the return false statement:

	<nowiki>		<nowiki>

Daniel at 11:08, 24 May 2013

2013-05-24T11:08:00Z

← Older revision		Revision as of 11:08, 24 May 2013
Line 1:		Line 1:
	from [http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]		from [http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]

	To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:		To make OC write auth failures to a logfile, modify <tt> path/to/owncloud/lib/user/database.php</tt> and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:

	<nowiki>		<nowiki>

Daniel at 11:07, 24 May 2013

2013-05-24T11:07:24Z

← Older revision		Revision as of 11:07, 24 May 2013
Line 1:		Line 1:
	[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]		from [http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]

	To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:		To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:

Daniel at 11:07, 24 May 2013

2013-05-24T11:07:14Z

← Older revision		Revision as of 11:07, 24 May 2013
Line 1:		Line 1:
	[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ ~~source~~]		[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/]

	To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:		To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:

Daniel: Created page with "[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ source] To make OC write auth failures to a logfile, modify ../owncloud/lib/user/d..."

2013-05-24T11:06:53Z

Created page with "[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ source] To make OC write auth failures to a logfile, modify ../owncloud/lib/user/d..."

New page

[http://www.dataparadis.net/osp/gnu-linux-server/cloud-server/owncloud-and-fail2ban-update/ source]

To make OC write auth failures to a logfile, modify ../owncloud/lib/user/database.php and insert in ''public function checkPassword( $uid, $password )'' (line 202) - just before the return false statement:

<nowiki>
$today = new DateTime();
date_timezone_set($today, timezone_open('Europe/Berlin'));
$IPClient= $_SERVER['REMOTE_ADDR'];
$logAuth = fopen('/var/log/owncloud-fail.log', 'a+');
fputs($logAuth, date_format($today, 'Y/m/d H:i:s') . " Password check failed for: \t" . $IPClient . "\n");
fclose($logAuth); </nowiki>

and a few lines later, around line 220, ahead of the last return false in the function:

<nowiki>
$today = new DateTime();
date_timezone_set($today, timezone_open('Europe/Berlin'));
$IPClient= $_SERVER['REMOTE_ADDR'];
$logAuth = fopen('/var/log/owncloud-fail.log', 'a+');
fputs($logAuth, date_format($today, 'Y/m/d H:i:s') . " Invalid username: \t" . $IPClient . "\n");
fclose($logAuth); </nowiki>

<tt>/etc/fail2ban/jail.conf</tt>

<nowiki>
[Owncloud]
enabled = true
port = http,https
filter = owncloud
logpath = /var/log/owncloud-fail.log
maxretry = 6 </nowiki>

<tt>/etc/fail2ban/filter.d/owncloud.conf</tt>

<nowiki>
# /etc/fail2ban/filter.d/owncloud.conf
#
# Fail2Ban configuration file
# By Anthony25 and Malekith25
# Owncloud
# </nowiki>

<nowiki>
[Definition]
# Option: failregex
# Filter Ban in /var/log/owncloud-fail.log
failregex = <HOST>$
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex = </nowiki>