From b698a749029af2c216268aa29a1228f21e87bfb7 Mon Sep 17 00:00:00 2001 From: sebres Date: Thu, 7 Sep 2017 19:07:06 +0200 Subject: [PATCH] introduces new command-line options `--dp`, `--dump-pretty` to dump the configuration using more human readable representation; allow dump of configuration, also if log-file is not available (warning only) --- fail2ban/client/configurator.py | 4 ++-- fail2ban/client/fail2bancmdline.py | 26 +++++++++++++++++------- fail2ban/client/jailreader.py | 9 +++++--- fail2ban/tests/fail2banclienttestcase.py | 6 +++++- 4 files changed, 32 insertions(+), 13 deletions(-) diff --git a/fail2ban/client/configurator.py b/fail2ban/client/configurator.py index e8472ac1..fe735251 100644 --- a/fail2ban/client/configurator.py +++ b/fail2ban/client/configurator.py @@ -76,9 +76,9 @@ class Configurator: self.__fail2ban.getOptions(updateMainOpt) return self.__jails.getOptions(jail, ignoreWrong=ignoreWrong) - def convertToProtocol(self): + def convertToProtocol(self, allow_no_files=False): self.__streams["general"] = self.__fail2ban.convert() - self.__streams["jails"] = self.__jails.convert() + self.__streams["jails"] = self.__jails.convert(allow_no_files=allow_no_files) def getConfigStream(self): cmds = list() diff --git a/fail2ban/client/fail2bancmdline.py b/fail2ban/client/fail2bancmdline.py index f213d037..401aa9b6 100644 --- a/fail2ban/client/fail2bancmdline.py +++ b/fail2ban/client/fail2bancmdline.py @@ -102,6 +102,7 @@ class Fail2banCmdLine(): output(" --logtarget |STDOUT|STDERR|SYSLOG") output(" --syslogsocket auto|") output(" -d dump configuration. For debugging") + output(" --dp, --dump-pretty dump the configuration using more human readable representation") output(" -t, --test test configuration (can be also specified with start parameters)") output(" -i interactive mode") output(" -v increase verbosity") @@ -137,8 +138,8 @@ class Fail2banCmdLine(): self._conf["pidfile"] = opt[1] elif o.startswith("--log") or o.startswith("--sys"): self._conf[ o[2:] ] = opt[1] - elif o == "-d": - self._conf["dump"] = True + elif o in ["-d", "--dp", "--dump-pretty"]: + self._conf["dump"] = True if o == "-d" else 2 elif o == "-t" or o == "--test": self.cleanConfOnly = True self._conf["test"] = True @@ -184,7 +185,8 @@ class Fail2banCmdLine(): # Reads the command line options. try: cmdOpts = 'hc:s:p:xfbdtviqV' - cmdLongOpts = ['loglevel=', 'logtarget=', 'syslogsocket=', 'test', 'async', 'timeout=', 'str2sec=', 'help', 'version'] + cmdLongOpts = ['loglevel=', 'logtarget=', 'syslogsocket=', 'test', 'async', + 'timeout=', 'str2sec=', 'help', 'version', 'dp', '--dump-pretty'] optList, self._args = getopt.getopt(self._argv[1:], cmdOpts, cmdLongOpts) except getopt.GetoptError: self.dispUsage() @@ -240,7 +242,10 @@ class Fail2banCmdLine(): if readcfg: ret, stream = self.readConfig() readcfg = False - self.dumpConfig(stream) + if stream is not None: + self.dumpConfig(stream, self._conf["dump"] == 2) + else: # pragma: no cover + output("ERROR: The configuration stream failed because of the invalid syntax.") if not self._conf.get("test", False): return ret @@ -275,7 +280,8 @@ class Fail2banCmdLine(): self.configurator.readAll() ret = self.configurator.getOptions(jail, self._conf, ignoreWrong=not self.cleanConfOnly) - self.configurator.convertToProtocol() + self.configurator.convertToProtocol( + allow_no_files=self._conf.get("dump", False)) stream = self.configurator.getConfigStream() except Exception as e: logSys.error("Failed during configuration: %s" % e) @@ -283,9 +289,15 @@ class Fail2banCmdLine(): return ret, stream @staticmethod - def dumpConfig(cmd): + def dumpConfig(cmd, pretty=False): + if pretty: + from pprint import pformat + def _output(s): + output(pformat(s, width=1000, indent=2)) + else: + _output = output for c in cmd: - output(c) + _output(c) return True # diff --git a/fail2ban/client/jailreader.py b/fail2ban/client/jailreader.py index ce0ed3b6..ffc28752 100644 --- a/fail2ban/client/jailreader.py +++ b/fail2ban/client/jailreader.py @@ -235,9 +235,12 @@ class JailReader(ConfigReader): found_files += 1 stream.append( ["set", self.__name, "addlogpath", p, tail]) - if not (found_files or allow_no_files): - raise ValueError( - "Have not found any log file for %s jail" % self.__name) + if not found_files: + msg = "Have not found any log file for %s jail" % self.__name + if not allow_no_files: + raise ValueError(msg) + logSys.warning(msg) + elif opt == "logencoding": stream.append(["set", self.__name, "logencoding", value]) elif opt == "backend": diff --git a/fail2ban/tests/fail2banclienttestcase.py b/fail2ban/tests/fail2banclienttestcase.py index caacf63c..083ce815 100644 --- a/fail2ban/tests/fail2banclienttestcase.py +++ b/fail2ban/tests/fail2banclienttestcase.py @@ -426,7 +426,11 @@ class Fail2banClientTest(Fail2banClientServerBase): startparams = _start_params(tmp, True) self.execSuccess(startparams, "-vvd") self.assertLogged("Loading files") - self.assertLogged("logtarget") + self.assertLogged("['set', 'logtarget',") + self.pruneLog() + # pretty dump: + self.execSuccess(startparams, "--dp") + self.assertLogged("['set', 'logtarget',") @with_tmpdir @with_kill_srv