Mantis - denyhosts
Viewing Issue Advanced Details
4492 packaging minor always 2010-07-17 04:07 2014-02-14 15:53
flod  
dam  
normal  
closed  
fixed  
none    
none  
0004492: denyhosts is auto-activated under smf, but not configured completely
After installation one will have the service in maintenance mode:

> svcs -xv
svc:/network/cswdenyhosts:default (?)
 State: maintenance since 17. Juli 2010 03:58:56 MEST
Reason: Restarting too quickly.
   See: http://sun.com/msg/SMF-8000-L5 [^]
   See: /var/svc/log/network-cswdenyhosts:default.log
Impact: This service is not running

I guess the reason is that the log file is not configured in
/etc/opt/csw/denyhosts.cfg

I think it is very sane to require any admin to think first about the correct configuration regarding the log files, but the service should not be auto-activated when it can not run from scratch.

This is especially an annoyance as the service is auto-activated for all zones. So all zones will have a service in maintenance.

I suggest that the service should not be auto-activated in zones or even the global zone.
> grep "^SECURE_LOG" /etc/opt/csw/denyhosts.cfg
SECURE_LOG = path to ssh log
Issue History
2010-07-17 04:07 flod New Issue
2013-06-21 15:46 dam Status new => assigned
2013-06-21 15:46 dam Assigned To => dam
2013-06-21 15:52 dam Note Added: 0010443
2013-06-21 15:52 dam Status assigned => feedback
2014-02-14 15:53 dam Note Added: 0010708
2014-02-14 15:53 dam Status feedback => closed
2014-02-14 15:53 dam Resolution open => fixed

Notes
(0010443)
dam   
2013-06-21 15:52   
This is changed to /var/log/authlog, but you still need to make the changes in syslog.conf as described in README.CSW. Please verify at
  http://buildfarm.opencsw.org/experimental.html#denyhosts [^]
(0010708)
dam   
2014-02-14 15:53   
This has been pushed to unstable/, need feedback, closing.