github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

ENH/TST: filter, testcase and log entry for apache-auth authorization scheme mod_authz_owner

pull/287/head
Daniel Black 2013-07-17 23:05:04 +10:00
parent 40cc336cd5
commit e0292913eb
5 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/filter.d/apache-auth.conf
View File

@ -29,6 +29,7 @@ before = apache-common.conf
failregex = ^%(_apache_error_client)s user .* authentication failure for "\S*": Password Mismatch$ failregex = ^%(_apache_error_client)s user .* authentication failure for "\S*": Password Mismatch$
^%(_apache_error_client)s user .* not found: \S*\s*$ ^%(_apache_error_client)s user .* not found: \S*\s*$
^%(_apache_error_client)s client used wrong authentication scheme: \S*\s*$ ^%(_apache_error_client)s client used wrong authentication scheme: \S*\s*$
^%(_apache_error_client)s Authorization of user \S+ to access \S* failed, reason: file owner \S+ does not match.\s*$
^%(_apache_error_client)s authorization failure \(no authenticated user\): \S*\s*$ ^%(_apache_error_client)s authorization failure \(no authenticated user\): \S*\s*$
^%(_apache_error_client)s client denied by server configuration: (uri )?\S*\s*$ ^%(_apache_error_client)s client denied by server configuration: (uri )?\S*\s*$
^%(_apache_error_client)s user .* authorization failure: \S*\s*$ ^%(_apache_error_client)s user .* authorization failure: \S*\s*$

5
testcases/files/config/apache-auth/basic/authz_owner/.htaccess Normal file
View File

@ -0,0 +1,5 @@
AuthType basic
AuthName "private area"
AuthBasicProvider file
AuthUserFile /var/www/html/basic/authz_owner/.htpasswd
Require file-owner

1
testcases/files/config/apache-auth/basic/authz_owner/.htpasswd Normal file
View File

@ -0,0 +1 @@
username:$apr1$1f5oQUl4$21lLXSN7xQOPtNsj5s4Nk/

0
testcases/files/config/apache-auth/basic/authz_owner/cant_get_me.html Normal file
View File

3
testcases/files/logs/apache-auth
View File

@ -20,3 +20,6 @@
# failJSON: { "time": "2013-07-17T22:39:55", "match": true , "host": "127.0.0.1" } # failJSON: { "time": "2013-07-17T22:39:55", "match": true , "host": "127.0.0.1" }
[Wed Jul 17 22:39:55 2013] [error] [client 127.0.0.1] client used wrong authentication scheme: /basic/file [Wed Jul 17 22:39:55 2013] [error] [client 127.0.0.1] client used wrong authentication scheme: /basic/file
# wget --http-user=username --http-password=password http://localhost/basic/authz_owner/cant_get_me.html -O /dev/null
# failJSON: { "time": "2013-07-17T22:54:32", "match": true , "host": "127.0.0.1" }
[Wed Jul 17 22:54:32 2013] [error] [client 127.0.0.1] Authorization of user username to access /basic/authz_owner/cant_get_me.html failed, reason: file owner dan does not match.