Jailkit & fail2ban paigaldamisega probleemid[LAHENDATUD]

[-IFFI-]

Üritan pingsalt peale pressida jailkit-i Debian 6 64bit dedicated serevrile selle õpetuse järgi
http://www.howtoforge.com/perfect-serve ... onfig-3-p4

Annab pidevalt järgmist errorit

Kood: Vali kõik

# apt-get -f install
Reading package lists... Done
Building dependency tree       
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Paki jailkit (2.13-1) paikasättimine ...
insserv: warning: script 'jailkit' missing LSB tags and overrides
insserv: There is a loop between service munin-node and jailkit if stopped
insserv:  loop involving service jailkit at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping jailkit depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
dpkg: viga paki jailkit töötlemisel (--configure):
 alamprotsess installed post-installation script tagastas lõpetamisel veakoodi 1
configured to not write apport reports
                                      Järgnevate pakkide töötlemisel tekkisid vead:
 jailkit
E: Sub-process /usr/bin/dpkg returned an error code (1)

Mõistus otsas....koogel-moogeldanud seda errorit aga no ei saa peale.

Oleksin ülimalt tänulik kui keegi poetaks mõne lahendust pakkuva idee?

Sama jama ka fail2ban paigaldusega

Kood: Vali kõik

# apt-get install fail2ban
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Suggested packages:
  python-gamin
The following NEW packages will be installed:
  fail2ban
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
Need to get 96,5 kB of archives.
After this operation, 606 kB of additional disk space will be used.
Get:1 http://security.debian.org/ squeeze/updates/main fail2ban all 0.8.4-3+squeeze2 [96,5 kB]
Fetched 96,5 kB in 0s (421 kB/s)   
Varem valimata paki fail2ban valimine.
(Andmebaasi lugemine ... 69055 files and directories currently installed.)
Paki fail2ban lahtipakkimine (failist .../fail2ban_0.8.4-3+squeeze2_all.deb) ...
Processing triggers for man-db ...
Paki jailkit (2.13-1) paikasättimine ...
insserv: warning: script 'jailkit' missing LSB tags and overrides
insserv: There is a loop between service munin-node and jailkit if stopped
insserv:  loop involving service jailkit at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping jailkit depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
dpkg: viga paki jailkit töötlemisel (--configure):
 alamprotsess installed post-installation script tagastas lõpetamisel veakoodi 1
Paki fail2ban (0.8.4-3+squeeze2) paikasättimine ...
configured to not write apport reports
                                      insserv: warning: script 'jailkit' missing LSB tags and overrides
insserv: There is a loop between service munin-node and jailkit if stopped
insserv:  loop involving service jailkit at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping jailkit depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
dpkg: viga paki fail2ban töötlemisel (--configure):
 alamprotsess installed post-installation script tagastas lõpetamisel veakoodi 1
configured to not write apport reports
                                      Processing triggers for python-central ...
Järgnevate pakkide töötlemisel tekkisid vead:
 jailkit
 fail2ban
E: Sub-process /usr/bin/dpkg returned an error code (1)

[imre]

sudo apt-get remove insserv
ja siis proovi uuesti.

[-IFFI-]

Sain eemaldamise vastuseks järgmise errori

Kood: Vali kõik

# sudo apt-get remove insserv 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:
  file-rc
The following packages will be REMOVED:
  insserv sysv-rc
The following NEW packages will be installed:
  file-rc
WARNING: The following essential packages will be removed.
This should NOT be done unless you know exactly what you are doing!
  sysv-rc (due to sysvinit)
0 upgraded, 1 newly installed, 2 to remove and 0 not upgraded.
2 not fully installed or removed.
Need to get 39,2 kB of archives.
After this operation, 422 kB disk space will be freed.
You are about to do something potentially harmful.
To continue type in the phrase 'Yes, do as I say!'
 ?] Yes, do as I say!
Get:1 http://debian.mirrors.ovh.net/debian/ squeeze/main file-rc all 0.8.12 [39,2 kB]
Fetched 39,2 kB in 0s (2 275 kB/s)  
dpkg: sysv-rc: sõltuvusprobleemid, kuid vastavalt nõudmisele eemaldatakse ikkagi:
 initscripts sõltub pakist sysv-rc | file-rc; igatahes:
  Pakk sysv-rc eemaldatakse.
  Pakk file-rc pole paigaldatud.
 sysvinit sõltub pakist sysv-rc | file-rc; igatahes:
  Pakk sysv-rc eemaldatakse.
  Pakk file-rc pole paigaldatud.
(Andmebaasi lugemine ... 70709 files and directories currently installed.)
Paki sysv-rc eemaldamine...

Unable to revert to legacy boot ordering and remove sysv-rc.  Missing
update-rc.d information for the following packages:

dpkg: /etc/init.d/fixudev ei leitud.
  webmin

This is due to earlier issues with sysv-rc and insserv.  To work
around this issue, the packages listed need to register the
update-rc.d call again, for example using

  dpkg-reconfigure  webmin

before trying again to migrate to legacy boot ordering.  The removed
packages might need to be purged.  For some packages, purging and
reinstalling might be needed to record the update-rc.d call.

Aborting package removal until this is done, to avoid leaving the boot
system in a non-functioning state.  The insserv package needs to be
installed to be able to reconfigure the packages.

dpkg: viga paki sysv-rc töötlemisel (--remove):
 alamprotsess installed pre-removal script tagastas lõpetamisel veakoodi 1
configured to not write apport reports
                                      Järgnevate pakkide töötlemisel tekkisid vead:
 sysv-rc
E: Sub-process /usr/bin/dpkg returned an error code (1)

Ja kui üritasin hakata uuesti paigaldama siis taas sama tulemus lõpuks

Kood: Vali kõik

apt-get install build-essential autoconf automake1.9 libtool flex bison debhelper
Reading package lists... Done
Building dependency tree       
Reading state information... Done
autoconf is already the newest version.
automake1.9 is already the newest version.
bison is already the newest version.
build-essential is already the newest version.
debhelper is already the newest version.
flex is already the newest version.
libtool is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
2 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue [Y/n]? y
Paki fail2ban (0.8.4-3+squeeze2) paikasättimine ...
insserv: warning: script 'jailkit' missing LSB tags and overrides
insserv: There is a loop between service munin-node and jailkit if stopped
insserv:  loop involving service jailkit at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping jailkit depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
dpkg: viga paki fail2ban töötlemisel (--configure):
 alamprotsess installed post-installation script tagastas lõpetamisel veakoodi 1
configured to not write apport reports
                                      Paki jailkit (2.13-1) paikasättimine ...
insserv: warning: script 'jailkit' missing LSB tags and overrides
insserv: There is a loop between service munin-node and jailkit if stopped
insserv:  loop involving service jailkit at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping jailkit depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
dpkg: viga paki jailkit töötlemisel (--configure):
 alamprotsess installed post-installation script tagastas lõpetamisel veakoodi 1
Processing triggers for python-central ...
configured to not write apport reports
                                      Järgnevate pakkide töötlemisel tekkisid vead:
 fail2ban
 jailkit
E: Sub-process /usr/bin/dpkg returned an error code (1)

Aru ma ei saa mis jama on, ühele serverile sain selle kunagi probleemitult peale nuid miski kepp

[imre]

Siis peab natukene tuhnima mis jama see on.
Lase senikaua insserv uuesti peale jamade vältimiseks.

[-IFFI-]

No ma ta nuid taas maha lasin a kas see mõjuma midagi ei hakka mu ISPconfig süsteemile?

Ja mis selle pakil "sysv-rc" viga on, et töötlemise on taas viga.

Ahjaa, äkki kogu jama on selles, et ma seda QUOTA osa peale ei lasknud? Kuigi eelmisel õnnestunud installil ka ma seda peale ei lasknud.

[imre]

Kas jailkit ja fail2ban on ametlikest repodest pärit või mõni third-party repo?
Tundub, et insserv hakkab ruigama LSB tag'ide puudumise peale pakis.
Kui ametlikust tuleb, siis peaks tag'idega kõik OK olema.

[-IFFI-]

Ma arvan, et kindlasti pole ametlikust repost kuna mul aint 5 rida sources.list.

Kood: Vali kõik

******
******
deb http://security.debian.org/ squeeze/updates main
deb-src http://security.debian.org/ squeeze/updates main

deb http://ftp.de.debian.org/debian/ squeeze-updates main

Missugused need ametlikud peaks välja nägema ja kuidas nendest paigaldada või pole vahet kui lisan repod sources.list. ?

Hakkab keeruliseks minema

[imre]

jailkit & fail2ban sikutasid ise kuskilt või püüdsid otse repost paigaldada?

[-IFFI-]

Ikka sealt nagu õpetuses kirjas ehk siis
jailkit tuli siit wget http://olivier.sessink.nl/jailkit/jailkit-2.13.tar.gz

Ja fail2ban läks peale apt-get install fail2ban

[imre]

Vaata et jailkit'ist mingeid jäänuseid alles ei ole.
Näiteks /etc/init.d all - on seal jailkit olemas?
Kui on, siis võid teha ka dpkg --purge jailkit
Las võtab kogu selle jama maha ning siis võid korra proovida fail2ban peale ajada.
jailkit'iga saab hiljem tegeleda.

[-IFFI-]

Nii fail2ban sai peale nüüd edukalt ilma probleemideta ehk sisi erroriteta. Tegin vajalikud failid mis antud õpetuses.

http://www.howtoforge.com/perfect-serve ... onfig-3-p5

Ning üritades restartida väidab, et pole sellist asjandust olemas

Kood: Vali kõik

# /etc/init.d/fail2ban restart 
-bash: /etc/init.d/fail2ban: No such file or directory

Veel vahele üks küsimus, see jailkit on ju see jubin mis laseb kasutajatel kasutada SSH-d?

[imre]

Kas jailkit oligi masinas olemas ja selle eemaldamine aitas fail2ban peale?

Mida sa mõtled ssh kasutamise all? Et kasutajad saaksid kaugelt masinasse sisse ssh kaudu?

fail2ban kohapeal vaata kas ta on kenasti /etc/init.d all oleamas.
Kui mitte, siis võta see korraks maha: dpkg --purge fail2ban ning pane uuesti peale. Või vaata kas logides on mingit jälge paigaldusvigade kohta.

[-IFFI-]

eee jailkiti lasin ikka esmalt maha siis fail2ban peale.

Nüüd sai ka fail2ban problemitult peale ja restarditud. Esmalt ei olnud jah seda /etc/init.d all nuid ka seal kenasti ning restarditud. Sellega on asi selleks korraks OK

SSH all mõtlesin jah täpselt seda sama nagu sina mõtled. Et siis saavad oma kontosse sisse logida eemalt jah....aga seda tegelt polegi vaja mul paigaldada kuna seda võimalust ei anna neile ma

Õpetus lehel on kirjas jaikiti kohta nii "Jailkit is needed only if you want to chroot SSH users. It can be installed as follows (important: Jailkit must be installed before ISPConfig - it cannot be installed afterwards!):"

Õpetus ise siin lehe lõpus http://www.howtoforge.com/perfect-serve ... onfig-3-p4

Aga igaljuhul mustmiljon-triljon tänu sulle abi eest

[imre]

jailkit on pigem kasutajate piiramiseks teatud käskude kasutamisel jne

Ag jah, palun ...märgi teema kui [LAHENDATUD] siis ehk saavad ka teised sellest kunagi abi.

[-IFFI-]

A nii pidi...see on see kui ise pole koolis sõnagi õppinud ja trantslaatoriga suhtled

Kuna mul juba ISPconfig installitud siis seda jailkiti ei saa enam paigaldada, selle oleks pidanud ennem paigaldama. Hetkel nagu nii testimis aeg eks vaatab siis kui tuleb lõpp install.

Igaljuhul minupoolt on see teema hetkeks ennast ammendanud. TÄNUD