4fdf13f95f
we have information here not available in the access log, especially if the /api2/extjs formatter is used, which encapsulates errors in a 200 response. So keep the auth log for now, but extend it use from create ticket calls to all authentication failures for API calls, this ensures one can also fail2ban tokens. Do that logging in a central place, which makes it simple but means that we do not have the user ID information available to include in the log. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
49 lines
1.5 KiB
Bash
49 lines
1.5 KiB
Bash
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
#DEBHELPER#
|
|
|
|
case "$1" in
|
|
configure)
|
|
# modeled after dh_systemd_start output
|
|
systemctl --system daemon-reload >/dev/null || true
|
|
if [ -n "$2" ]; then
|
|
_dh_action=try-reload-or-restart
|
|
else
|
|
_dh_action=start
|
|
fi
|
|
deb-systemd-invoke $_dh_action proxmox-backup.service proxmox-backup-proxy.service >/dev/null || true
|
|
|
|
# FIXME: Remove with 1.1
|
|
if test -n "$2"; then
|
|
if dpkg --compare-versions "$2" 'lt' '0.9.4-1'; then
|
|
if grep -s -q -P -e '^\s+verify-schedule ' /etc/proxmox-backup/datastore.cfg; then
|
|
echo "NOTE: drop all verify schedules from datastore config."
|
|
echo "You can now add more flexible verify jobs"
|
|
flock -w 30 /etc/proxmox-backup/.datastore.lck \
|
|
sed -i '/^\s\+verify-schedule /d' /etc/proxmox-backup/datastore.cfg || true
|
|
fi
|
|
fi
|
|
if dpkg --compare-versions "$2" 'le' '0.9.5-1'; then
|
|
chown --quiet backup:backup /var/log/proxmox-backup/api/auth.log || true
|
|
fi
|
|
fi
|
|
# FIXME: Remove in future version once we're sure no broken entries remain in anyone's files
|
|
if grep -q -e ':termproxy::[^@]\+: ' /var/log/proxmox-backup/tasks/active; then
|
|
echo "Fixing up termproxy user id in task log..."
|
|
flock -w 30 /var/log/proxmox-backup/tasks/active.lock sed -i 's/:termproxy::\([^@]\+\): /:termproxy::\1@pam: /' /var/log/proxmox-backup/tasks/active || true
|
|
fi
|
|
;;
|
|
|
|
abort-upgrade|abort-remove|abort-deconfigure)
|
|
;;
|
|
|
|
*)
|
|
echo "postinst called with unknown argument \`$1'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
exit 0
|