On 2015-07-07 09:49:52 -0400, Yaroslav Halchenko wrote:
> On Tue, 07 Jul 2015, Vincent Lefevre wrote:
> > This is only in the logs. The user isn't supposed to look at the
> > logs each time he boots his machine to check whether some service
> > has refused to start by design.
> 
> it is also on console whenever you are trying to start a misconfigured
> service (I have tuned up jail.conf to point to a nonexisting file):
> 
> hopa# service fail2ban start                    
> Job for fail2ban.service failed. See 'systemctl status fail2ban.service' and 
> 'journalctl -xn' for details.
> hopa# /etc/init.d/fail2ban start
> [....] Starting fail2ban (via systemctl): fail2ban.serviceJob for 
> fail2ban.service failed. See 'systemctl status fail2ban.service' and 
> 'journalctl -xn' for details.
>  failed!
> 
> does it report a successful start for you?

Yes, but this isn't something one usually does. In general, fail2ban
is started at boot time.

Note also that the systemd log doesn't give the reason. The reason
can only be found in /var/log/syslog (the cause seems to be that
the error comes from fail2ban-client and not fail2ban.service).

> if not -- I would close it (again) since I see no problem.  Would apache2
> start for you if you have misconfigured one of its hosted domains?

This is different: in fail2ban, the configuration was correct. The
error is just due to missing *non-config data*. Similarly, with
apache2, if I remove non-config data, apache2 can still start.

> the only possible related enhancement I can see is extending config
> specification to allow for "automatic enable for sections if log files exist",
> but it needs to be explicit:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=407404
> https://github.com/fail2ban/fail2ban/issues/55

Yes, thanks, an "enabled=auto" feature would be OK.

> if you feel that this is what you want then I would just merge this one
> into 407404.

You can either close this bug or merge it with 407404.
I have just subscribed to 407404.

BTW, in bug 407404, shouldn't the "forwarded" be updated to the
upstream bug? (Or at least give a reference somewhere in the bug.)

-- 
Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to