Skip to content

Commit 9fd5b0d

Browse files
zeripathAbdulrhmnGhanem
authored andcommitted
Update fail2ban documentation (go-gitea#16286)
Following the merge of go-gitea#16278 we need to update the fail2ban documentation to take account of the availability of the new sshConnectionFailed failed authentication attempt log message. Also add a deprecation notice regarding the previous publicKeyHandler messages, as these may be a source of false positives. Signed-off-by: Andrew Thornton <[email protected]>
1 parent 6832f43 commit 9fd5b0d

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

docs/content/doc/usage/fail2ban-setup.en-us.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,22 +29,32 @@ on a bad authentication from the web or CLI using SSH or HTTP respectively:
2929
```log
3030
2020/10/15 16:05:09 modules/ssh/ssh.go:143:publicKeyHandler() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
3131
```
32+
(DEPRECATED: This may be a false positive as the user may still go on to correctly authenticate.)
3233

3334
```log
3435
2020/10/15 16:05:09 modules/ssh/ssh.go:155:publicKeyHandler() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
3536
```
37+
(DEPRECATED: This may be a false positive as the user may still go on to correctly authenticate.)
3638

3739
```log
3840
2020/10/15 16:05:09 modules/ssh/ssh.go:198:publicKeyHandler() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
3941
```
42+
(DEPRECATED: This may be a false positive as the user may still go on to correctly authenticate.)
4043

4144
```log
4245
2020/10/15 16:05:09 modules/ssh/ssh.go:213:publicKeyHandler() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
4346
```
47+
(DEPRECATED: This may be a false positive as the user may still go on to correctly authenticate.)
4448

4549
```log
4650
2020/10/15 16:05:09 modules/ssh/ssh.go:227:publicKeyHandler() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
4751
```
52+
(DEPRECATED: This may be a false positive as the user may still go on to correctly authenticate.)
53+
54+
```log
55+
2020/10/15 16:05:09 modules/ssh/ssh.go:249:sshConnectionFailed() [W] Failed authentication attempt from xxx.xxx.xxx.xxx
56+
```
57+
(From 1.15 this new message will available and doesn't have any of the false positive results that above messages from publicKeyHandler do. This will only be logged if the user has completely failed authentication.)
4858

4959
```log
5060
2020/10/15 16:08:44 ...s/context/context.go:204:HandleText() [E] invalid credentials from xxx.xxx.xxx.xxx

0 commit comments

Comments
 (0)