Bug 2255017

Summary:	Roundcube filter broken
Product:	[Fedora] Fedora EPEL	Reporter:	Frank Büttner <bugzilla>
Component:	fail2ban	Assignee:	Orion Poplawski <orion>
Status:	NEW ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel9	CC:	anon.amish, hobbes1069, orion, vonsch
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Frank Büttner 2023-12-18 14:03:26 UTC

Description of problem:
The roundcube filter will not detect failed logins.

Version-Release number of selected component (if applicable):
fail2ban-server-1.0.2-7.el9.noarch
Roundcube: 1.6.5

How reproducible:
Every time

Steps to Reproduce:
1. Log in with in invalid user

Actual results:
The failed log in are not detected

Expected results:
Fail2ban detect the failed log in

Additional info:
Same line for an failed log in (journal):
Dez 18 15:00:58 Roundcube[118773]: <rbfi2j6d> IMAP Error: Login failed for <User> against <Target FQDN> from <User IP>. AUTHENTICATE PLAIN: Authentication failed. in /var/www/roundcube/program/lib/Roundcube/rcube_imap.php on line 211 (POST /?_task=login&_action=login

jain config:
[roundcube]
enabled = true
protocol = tcp
logpath =
journalmatch='SYSLOG_IDENTIFIER=Roundcube'
filter = roundcube-auth

Comment 1 Orion Poplawski 2024-02-22 18:44:09 UTC

I would suggest reporting this upstream: https://github.com/fail2ban/fail2ban/issues