Koozali.org: home of the SME Server

Contribs.org Forums => Koozali SME Server 10.x Contribs => Topic started by: smeghead on June 13, 2021, 07:44:51 AM

Title: Fail2ban update via yum fails
Post by: smeghead on June 13, 2021, 07:44:51 AM

Just ran yum update smeserver-fail2ban fail2ban --enablerepo=smecontribs

[root@gateway ~]# yum update smeserver-fail2ban fail2ban --enablerepo=smecontribs
Loaded plugins: changelog, fastestmirror, post-transaction-actions, priorities, smeserver
Loading mirror speeds from cached hostfile
 * base: mirror.colocity.com
 * smeaddons: mirror.internode.on.net
 * smecontribs: smeserver.de-labrusse.fr
 * smeextras: mirror.internode.on.net
 * smeos: mirror.internode.on.net
 * smeupdates: mirror.internode.on.net
 * updates: mirror.colocity.com
Resolving Dependencies
--> Running transaction check
---> Package fail2ban-firewalld.noarch 0:0.11.1-10.el7 will be obsoleted
--> Processing Dependency: fail2ban-firewalld = 0.11.1-10.el7 for package: fail2ban-0.11.1-10.el7.noarch
---> Package firewalld.noarch 0:0.6.3-13.el7_9 will be obsoleted
---> Package smeserver-fail2ban.noarch 9:0.1.18-12.el7.sme will be updated
---> Package smeserver-fail2ban.noarch 9:0.1.18-13.el7.sme will be obsoleting
--> Finished Dependency Resolution
Error: Package: fail2ban-0.11.1-10.el7.noarch (@epel)
           Requires: fail2ban-firewalld = 0.11.1-10.el7
           Removing: fail2ban-firewalld-0.11.1-10.el7.noarch (@epel)
               fail2ban-firewalld = 0.11.1-10.el7
           Obsoleted By: 9:smeserver-fail2ban-0.1.18-13.el7.sme.noarch (smecontribs)
               Not found
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

Are we missing an allied update to smeserver-fail2ban or does this package need to have its deps/requires updated?

Am I missing something else?

TIA

Title: Re: Fail2ban update via yum fails
Post by: sages on June 13, 2021, 07:57:25 AM

For some reason I can't find the reference to this. But, from memory, I had to uninstall smeserver-fail2ban and fail2ban, then do a new install of smeserver-fail2ban.
There was an issue with an update that didn't cleanly update. Once I did the uninstall and new install it worked ok.
[have searched bugs and the forum but can't find it)

[edit] had a better search
https://bugs.koozali.org/show_bug.cgi?id=11617
https://bugs.koozali.org/show_bug.cgi?id=10949

hint, when searching bugzilla instead of 'firewalld' try 'All firewalld' to include closed bugs

Title: Re: Fail2ban update via yum fails
Post by: smeghead on June 13, 2021, 08:11:25 AM

Thanks for the heads ups

Title: Re: Fail2ban update via yum fails
Post by: Jean-Philippe Pialasse on June 14, 2021, 04:05:43 AM

version you installed form smetest was wrongly making deps on fail2ban, which depends on fail2ban-firewalld,which depends on firewalld, which can break masq, the firewall of sme server.

please have a check you do not have firewalld installed after that, if yes, remove it.

Title: Re: Fail2ban update via yum fails
Post by: smeghead on June 19, 2021, 01:05:18 PM

.. all true, did a complete uninstall & reinstall & all is good with the world again

Thanks

Quote from: Jean-Philippe Pialasse on June 14, 2021, 04:05:43 AM

version you installed form smetest was wrongly making deps on fail2ban, which depends on fail2ban-firewalld,which depends on firewalld, which can break masq, the firewall of sme server.

please have a check you do not have firewalld installed after that, if yes, remove it.

Title: Re: Fail2ban update via yum fails
Post by: umbi on October 29, 2021, 11:29:48 AM

Hello

I installed a fresh V10 now and fail2ban.
now when i open the servermanager-gui and i point to fail2ban, i get "internal server error".

*The server encountered an internal error or misconfiguration and was unable to complete your request*

--------
I did following commands over SSH:

yum --enablerepo=smecontribs install smeserver-fail2ban

db configuration setprop masq status enabled
expand-template /etc/rc.d/init.d/masq
/etc/init.d/masq restart
signal-event fail2ban-conf

+

 config setprop sshd AutoBlock disabled
 signal-event remoteaccess-update
---------

System:

SME server version:      10.0
SME server mode:         serveronly
SME server previous mode: serveronly
Running Kernel:          3.10.0-1160.45.1.el7.x86_64

===========================
New RPMs not in base system
===========================
fail2ban-sendmail.noarch                0.11.2-2.el7                @smecontribs
fail2ban-server.noarch                  0.11.2-2.el7                @smecontribs
smeserver-fail2ban.noarch               9:0.1.18-15.el7.sme         @smecontribs

Greez + Thanks

Umbi

Title: Re: Fail2ban update via yum fails
Post by: Jean-Philippe Pialasse on October 29, 2021, 12:35:05 PM

if you checked wiki first you could have saved you time to get the answer.

https://wiki.koozali.org/index.php?title=Fail2ban&mobileaction=toggle_view_desktop#Bugs


and also this section

https://wiki.koozali.org/index.php?title=Fail2ban&mobileaction=toggle_view_desktop#Koozali_SME_v9.2Fv10

Title: Re: Fail2ban update via yum fails
Post by: umbi on October 29, 2021, 12:39:20 PM

Thank you Jean-Philippe :-)
So it works properly but only the server-manager view is buggy.... no problem can live with it ...

Title: Re: Fail2ban update via yum fails
Post by: ReetP on October 29, 2021, 01:15:12 PM

Quote from: umbi on October 29, 2021, 12:39:20 PM

So it works properly but only the server-manager view is buggy.... no problem can live with it ...

Read this:
https://bugs.koozali.org/show_bug.cgi?id=11720

Please help test.

Code: [Select]

yum install smeserver-fail2ban --enablerepo=smetest,smecontribs
Please verification template is here:

https://wiki.koozali.org/SME_Server:Documentation:QA:Verification