/[smeserver]/rpms/smeserver-manager/sme10/smeserver-manager-0.1.2-CSRFDefender_cronjob_fail2ban.patch
ViewVC logotype

Annotation of /rpms/smeserver-manager/sme10/smeserver-manager-0.1.2-CSRFDefender_cronjob_fail2ban.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.2 - (hide annotations) (download)
Mon Jun 21 15:09:29 2021 UTC (3 years, 4 months ago) by michel
Branch: MAIN
CVS Tags: HEAD
Changes since 1.1: +0 -0 lines
FILE REMOVED 
make: « clog » est à jour.
1 michel 1.1 diff -urN smeserver-manager-0.1.2.old/f2b/fail2ban_smanager/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service32Smanager smeserver-manager-0.1.2/f2b/fail2ban_smanager/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service32Smanager
2     --- smeserver-manager-0.1.2.old/f2b/fail2ban_smanager/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service32Smanager 1970-01-01 04:00:00.000000000 +0400
3     +++ smeserver-manager-0.1.2/f2b/fail2ban_smanager/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service32Smanager 2021-06-07 20:42:59.111000000 +0400
4     @@ -0,0 +1,25 @@
5     +{
6     +my $port = (${'httpd-e-smith'}{'TCPPort'} || '80') .','.
7     + ($modSSL{'TCPPort'} || '443');
8     +my $status = $smanager{'status'} || 'disabled';
9     +my $f2b = $smanager{'Fail2Ban'} || 'enabled';
10     +return "" if (($status ne 'enabled') || ($f2b ne 'enabled'));
11     +
12     +$OUT .=<<"EOF";
13     +
14     +[smanager]
15     +enabled = true
16     +port = $port
17     +filter = smanager
18     +logpath = /usr/share/smanager/log/production.log
19     +maxretry = 3
20     +findtime = 300
21     +bantime = 1800
22     +action = smeserver-iptables[port="$port",protocol=tcp,bantime=$bantime]
23     +
24     +EOF
25     +
26     +$OUT .= " smeserver-sendmail[name=\"SManager\",dest=$maildest]\n"
27     + if ($mail eq 'enabled');
28     +
29     +}
30     diff -urN smeserver-manager-0.1.2.old/f2b/fail2ban_smanager/etc/fail2ban/filter.d/smanager.conf smeserver-manager-0.1.2/f2b/fail2ban_smanager/etc/fail2ban/filter.d/smanager.conf
31     --- smeserver-manager-0.1.2.old/f2b/fail2ban_smanager/etc/fail2ban/filter.d/smanager.conf 1970-01-01 04:00:00.000000000 +0400
32     +++ smeserver-manager-0.1.2/f2b/fail2ban_smanager/etc/fail2ban/filter.d/smanager.conf 2021-02-12 00:11:46.000000000 +0400
33     @@ -0,0 +1,26 @@
34     +# Fail2Ban filter for Smanager attempted bypasses
35     +
36     +[Definition]
37     +#[Mon Nov 9 20:33:34 2020] [info] Login FAILED: mab 192.168.0.11
38     +
39     +#_groupsre = (?:(?:,?\s*"\w+":(?:"[^"]+"|\w+))*)
40     +#failregex = ^\{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Login failed:
41     +# ^\{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Trusted domain error.
42     +
43     +failregex = ^\[.*\] \[info\] Login FAILED: .*\t<HOST>$
44     +
45     +#ignoreregex =
46     +ignoreregex = ^\[.*\] \[debug\] .*$
47     +ignoreregex = ^\[.*\] \[info\] Login succeeded: .*$
48     +
49     +#datepattern = ,?\s*"time"\s*:\s*"%%Y-%%m-%%d[T ]%%H:%%M:%%S(%%z)?"
50     +
51     +#datepattern = ^[%%a %%b %%d %%H:%%M:%%S %%Y]
52     +#datepattern = ^\[%%a %%b %%-d %%X %%Y\]
53     +#^[LN-BEG]
54     +# ^[%%a %%b %%-d %%X %%Y]
55     +# {^LN-BEG}Epoch
56     +datepattern = {^LN-BEG}
57     +
58     +# Author: Michel Begue
59     +
60     diff -urN smeserver-manager-0.1.2.old/root/etc/e-smith/templates/etc/crontab/smanager smeserver-manager-0.1.2/root/etc/e-smith/templates/etc/crontab/smanager
61     --- smeserver-manager-0.1.2.old/root/etc/e-smith/templates/etc/crontab/smanager 1970-01-01 04:00:00.000000000 +0400
62     +++ smeserver-manager-0.1.2/root/etc/e-smith/templates/etc/crontab/smanager 2021-06-06 21:46:59.000000000 +0400
63     @@ -0,0 +1,6 @@
64     +{
65     + return "# smanager is disabled\n"
66     + unless $smanager{status} eq 'enabled';
67     +
68     + return "15 0 * * * root /usr/share/smanager/script/daily.sh \n"
69     +}
70     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Bugreport/bugreport_fr.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Bugreport/bugreport_fr.lex
71     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Bugreport/bugreport_fr.lex 2021-06-03 17:31:23.000000000 +0400
72     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Bugreport/bugreport_fr.lex 2021-06-08 19:54:31.919000000 +0400
73     @@ -7,7 +7,7 @@
74     'bugr_REPORT_CONTENT' => 'Le rapport contiendra les informations suivantes ',
75     'bugr_SME_VERSION' => 'Version du Serveur Koozali SME',
76     'bugr_SERVER_MODE' => 'Mode d’installation du serveur',
77     -'bugr_PREVIOUS_SERVER_MODE' => 'Mode d’installation précédent du serveur',
78     +'bugr_PREVIOUS_SERVER_MODE' => 'Mode d\’installation précédent du serveur',
79     'bugr_KERNEL_AND_ARCH' => 'Version chargée du kernel et architecture',
80     'bugr_INSTALLED_RPMS' => 'Une liste des RPMs additionnels installés sur votre serveur',
81     'bugr_ALTERED_TEMPLATES' => 'Une liste des gabarits SME qui ont été altérés sur votre serveur par rapport à une installation de base',
82     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Domains/domains_en.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Domains/domains_en.lex
83     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Domains/domains_en.lex 2021-06-03 17:31:23.000000000 +0400
84     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Domains/domains_en.lex 2021-06-07 22:20:14.162000000 +0400
85     @@ -36,11 +36,6 @@
86     is now being restarted.The links on this page will be inactive
87     until the web server restart is complete.',
88     'dom_DESC_CORPORATE_DNS_CURRENT' => 'Corporate DNS Settings',
89     -'dom_BUTTON_CORPORATE_DNS' => 'If this server does not have access to the Internet, or you have special
90     -requirements for DNS resolution, enter the DNS server IP address here.
91     -You should not enter the address of your ISP\'s DNS servers here, as the server
92     -is capable of resolving all Internet DNS names without this additional
93     -configuration.',
94     'dom_DOMAINS_PAGE_CORPORATE_DNS' => 'Modify corporate DNS settings',
95     'dom_DESC_CORPORATE_DNS' => 'If this server does not have access to the Internet, or
96     you have special requirements for DNS resolution,
97     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_en.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_en.lex
98     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_en.lex 2021-06-03 17:31:23.000000000 +0400
99     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_en.lex 2021-06-07 00:08:17.000000000 +0400
100     @@ -140,3 +140,4 @@
101     'User password' => 'User password',
102     Logout => 'Logout',
103     Home => 'Home',
104     +CSRF_VALIDATION_FAILURE => 'Error: CSRF token is invalid or outdated.',
105     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_fr.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_fr.lex
106     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_fr.lex 2021-06-03 17:31:23.000000000 +0400
107     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_fr.lex 2021-06-07 00:08:32.000000000 +0400
108     @@ -142,5 +142,4 @@
109     'User password' => 'Mot de passe utilisateur',
110     Logout => 'Déconnexion',
111     Home => 'Accueil',
112     -
113     -
114     +CSRF_VALIDATION_FAILURE => 'Erreur: le jeton CSRF est invalide ou expiré.',
115     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zh-tw.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zh-tw.lex
116     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zh-tw.lex 1970-01-01 04:00:00.000000000 +0400
117     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zh-tw.lex 2021-06-03 17:31:23.272000000 +0400
118     @@ -0,0 +1,129 @@
119     +'Collaboration' => '協作',
120     +'Administration' => '管理',
121     +'Security' => '安全性',
122     +'Configuration' => '設定組態',
123     +'Miscellaneous' => '雜項',
124     +'Your Settings' => '您的設定',
125     +'SAVE' => '儲存',
126     +'CANCEL' => '取消',
127     +'ENABLED' => '啟用',
128     +'DISABLED' => '禁用',
129     +'NO' => '否',
130     +'YES' => '是',
131     +'ADD' => '新增',
132     +'CREATE' => '建立',
133     +'MODIFY' => '修改',
134     +'REMOVE' => '移除',
135     +'COMMENT' => '備註',
136     +'NEXT' => '下一步',
137     +'SELF' => '自己',
138     +'REMOTE' => '遠端',
139     +'LOCAL' => '本機',
140     +'ACTION' => '動作',
141     +'NETWORK' => '網絡',
142     +'ROUTER' => '路由器',
143     +'OPERATION_STATUS_REPORT' => '運作狀態回報',
144     +'ACCOUNT' => '帳號',
145     +'GROUP' => '群組',
146     +'DESC_SECTIONBAR' => ' <hr class="sectionbar"/> ',
147     +'NO_PIPES_ALLOWED' => '管線符號（|）在此區塊中是不允許的',
148     +'ERROR_BELOW' => '錯誤：網頁驗證時存在錯誤。請下拉頁面並找到指定錯誤。',
149     +'ACCESS' => '存取',
150     +'ACCOUNT_LOCKED' => '帳號鎖定',
151     +'GROUP_ADD' => '增加群組',
152     +'NETWORKS_ALLOW_LOCAL' => '僅限區域網路存取',
153     +'NETWORKS_ALLOW_PUBLIC' => '允許公開存取（全部網際網路）',
154     +'ERROR_PASSWORD_CHANGE' => '試圖變更您的密碼時發生錯誤。請確認輸入的舊密碼是否正確。',
155     +'BACK' => '返回',
156     +'BACKUP' => '備份',
157     +'DESCRIPTION_BRIEF' => '簡介',
158     +'PASSWORD_CHANGE' => '改變密碼',
159     +'RESET_PASSWORD_TITLE' => '重設使用者密碼',
160     +'ACCOUNT_PASSWORD_CHANGE' => '修改帳號密碼',
161     +'CONTENT' => '內容',
162     +'CREATE_GROUP' => '建立使用者群組',
163     +'USER_LIST_CURRENT' => '當前使用者列表',
164     +'DESCRIPTION' => '介紹',
165     +'DESTINATION' => '目的地',
166     +'DOMAIN_NAME' => '網域名稱',
167     +'DOMAIN' => '網域',
168     +'DOMAINS' => '眾網域',
169     +'DOWNLOAD' => '下載',
170     +'ERROR_UPDATING_CONFIGURATION' => '更新系統設定時錯誤。',
171     +'GROUP_MEMBERS' => '群組成員',
172     +'GROUP_NAME' => '群組名稱',
173     +'GROUPS' => '群組',
174     +'IP_ADDRESS' => 'IP 地址',
175     +'IP_ADDRESS_OR_FQDN' => 'IP地址或FQDN',
176     +'USER_INVALID' => '無效使用者',
177     +'LOCATION' => '位置',
178     +'MB' => '百萬位元(Mb)',
179     +'MODIFY_USER_GROUP' => '修正使用者群組',
180     +'NAME' => '名稱',
181     +'PASSWORD_VERIFY_NEW' => '新密碼（驗證）：',
182     +'PASSWORD_NEW' => '新密碼：',
183     +'OFF' => '關閉',
184     +'OK' => '確定',
185     +'PASSWORD_OLD' => '舊密碼：',
186     +'ON' => '開啟',
187     +'PASSWORD' => '密碼',
188     +'PERFORM' => '執行',
189     +'RECONFIGURE' => '重新設定',
190     +'REMOVE_USER_GROUP' => '移除使用者群組',
191     +'PASSWORD_RESET' => '重設密碼',
192     +'RESTORE' => '還原',
193     +'SHUTDOWN' => '關閉系統',
194     +'SUCCESS' => '成功',
195     +'ACCOUNT_NAME_INVALID' => '輸入的帳號名稱無效。',
196     +'ACCOUNT_NAME_INVALID_CHARS' => '您輸入的帳號名稱包含無效字元。',
197     +'PASSWORD_OLD_INVALID_CHARS' => '您輸入的舊密碼包含無效字元。',
198     +'PASSWORD_INVALID_CHARS' => '您輸入的密碼包含無效字元。',
199     +'PASSWORD_VERIFY_ERROR' => '您輸入的密碼不符。',
200     +'ACCOUNT_USER_NONE' => '系統中無使用者帳號。',
201     +'ACCOUNT_GROUP_NONE' => '系統中無使用者群組。',
202     +'ERROR_INVALID_CHARS' => '描述涵蓋未預期字元。',
203     +'USER_NAME' => '使用者名稱',
204     +'YOUR_ACCOUNT' => '您的帳號：',
205     +'YOUR_ACCOUNT_INVALID' => '輸入的帳號名稱無效。',
206     +'PASSWORD_CHANGE_SUCCESS' => '您的密碼已修改成功。',
207     +'FM_NONBLANK' => '此區塊不能留白。',
208     +'FM_INTEGER' => '此區塊必須包含一個正整數。',
209     +'FM_NUMBER' => '此區塊必須包含一個數字。',
210     +'FM_WORD' => '此區塊必須看起來像個單一的字。',
211     +'FM_DATE' => '輸入的資料無法被解析為日期',
212     +'FM_CREDIT_CARD_NUMBER1' => '您必須輸入信用卡號碼',
213     +'FM_CREDIT_CARD_NUMBER2' => '信用卡號碼不應該包含數字、空格或破折號以外的其他字元',
214     +'FM_CREDIT_CARD_NUMBER3' => '字元長度至少為14個',
215     +'FM_CREDIT_CARD_NUMBER4' => '似非有效信用卡號碼',
216     +'FM_CREDIT_CARD_EXPIRY1' => '無輸入屆期日',
217     +'FM_CREDIT_CARD_EXPIRY2' => '屆期日格式須為MM/YY或MM/YYYY',
218     +'FM_CREDIT_CARD_EXPIRY3' => '似乎已過屆期日',
219     +'FM_CREDIT_CARD_EXPIRY4' => '未來屆期日似乎太長',
220     +'FM_ISO_COUNTRY_CODE1' => '您必須提供國碼',
221     +'FM_ISO_COUNTRY_CODE2' => '此欄位不包含ISO國碼',
222     +'FM_US_STATE' => '此似非有效2位元美國州縮寫',
223     +'FM_US_ZIPCODE' => '美國郵遞區號必須包含5或9個數字',
224     +'FM_MINLENGTH1' => '以{$minlength}指定的最小長度是無意義的。',
225     +'FM_MINLENGTH2' => '此區段最少需要{$minlength}個字元。',
226     +'FM_MAXLENGTH1' => '以{$maxlength}指定的最大長度是無意義的。',
227     +'FM_MAXLENGTH2' => '此區段不得超過{$maxlength}個字元。',
228     +'FM_EXACTLENGTH1' => '您必須為此區段指定長度。',
229     +'FM_EXACTLENGTH2' => '您必須以整數為此區段指定準確長度。',
230     +'FM_EXACTLENGTH3' => '此區段必須確定為{$exactlength}個字元。',
231     +'FM_LENGTHRANGE1' => '您必須為此區段指定最大與最小長度。',
232     +'FM_LENGTHRANGE2' => '您必須以整數為此區段指定最大與最小長度。',
233     +'FM_LENGTHRANGE3' => '此區段必須介於 {$minlength}與{$maxlength}個字元。',
234     +'FM_URL' => '此區段的URL必須以http://或ftp://開頭',
235     +'FM_EMAIL_SIMPLE1' => '您必須輸入一個電郵地址。',
236     +'FM_EMAIL_SIMPLE2' => '此區段不似RFC822相容的電郵地址',
237     +'FM_DOMAIN_NAME' => '此區段不似有效的網際網路網域名稱或主機名稱。',
238     +'FM_IP_NUMBER1' => '此區段必須包含一個有效的IP位址且不能留白。',
239     +'FM_IP_NUMBER2' => '無效的IP位址格式（例如X.X.X.X）',
240     +'FM_IP_NUMBER3' => '{$octet}大於255',
241     +'FM_USERNAME' => '此區塊需類有效使用者名稱（3到8個字母和數字）',
242     +'FM_PASSWORD1' => '您需提供密碼。',
243     +'FM_PASSWORD2' => '您提供的密碼不佳。良好的密碼需涵蓋以下：大小寫字母、數字、特殊字元，以及至少7個字元。',
244     +'FM_MAC_ADDRESS1' => '您需提供MAC位址。',
245     +'FM_MAC_ADDRESS2' => '您提供的MAC位址無效。',
246     +'FM_ERR_UNEXPECTED_DESC' => '錯誤：描述中涵蓋未知字元或遺失字元。',
247     +'CSRF_VALIDATION_FAILURE' => 'Error: CSRF token is invalid or outdated.',
248     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zn-tw.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zn-tw.lex
249     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zn-tw.lex 2021-06-03 17:31:23.000000000 +0400
250     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/General/general_zn-tw.lex 1970-01-01 04:00:00.000000000 +0400
251     @@ -1,129 +0,0 @@
252     -'Collaboration' => '協作',
253     -'Administration' => '管理',
254     -'Security' => '安全性',
255     -'Configuration' => '設定組態',
256     -'Miscellaneous' => '雜項',
257     -'Your Settings' => '您的設定',
258     -'SAVE' => '儲存',
259     -'CANCEL' => '取消',
260     -'ENABLED' => '啟用',
261     -'DISABLED' => '禁用',
262     -'NO' => '否',
263     -'YES' => '是',
264     -'ADD' => '新增',
265     -'CREATE' => '建立',
266     -'MODIFY' => '修改',
267     -'REMOVE' => '移除',
268     -'COMMENT' => '備註',
269     -'NEXT' => '下一步',
270     -'SELF' => '自己',
271     -'REMOTE' => '遠端',
272     -'LOCAL' => '本機',
273     -'ACTION' => '動作',
274     -'NETWORK' => '網絡',
275     -'ROUTER' => '路由器',
276     -'OPERATION_STATUS_REPORT' => '運作狀態回報',
277     -'ACCOUNT' => '帳號',
278     -'GROUP' => '群組',
279     -'DESC_SECTIONBAR' => ' <hr class="sectionbar"/> ',
280     -'NO_PIPES_ALLOWED' => '管線符號（|）在此區塊中是不允許的',
281     -'ERROR_BELOW' => '錯誤：網頁驗證時存在錯誤。請下拉頁面並找到指定錯誤。',
282     -'ACCESS' => '存取',
283     -'ACCOUNT_LOCKED' => '帳號鎖定',
284     -'GROUP_ADD' => '增加群組',
285     -'NETWORKS_ALLOW_LOCAL' => '僅限區域網路存取',
286     -'NETWORKS_ALLOW_PUBLIC' => '允許公開存取（全部網際網路）',
287     -'ERROR_PASSWORD_CHANGE' => '試圖變更您的密碼時發生錯誤。請確認輸入的舊密碼是否正確。',
288     -'BACK' => '返回',
289     -'BACKUP' => '備份',
290     -'DESCRIPTION_BRIEF' => '簡介',
291     -'PASSWORD_CHANGE' => '改變密碼',
292     -'RESET_PASSWORD_TITLE' => '重設使用者密碼',
293     -'ACCOUNT_PASSWORD_CHANGE' => '修改帳號密碼',
294     -'CONTENT' => '內容',
295     -'CREATE_GROUP' => '建立使用者群組',
296     -'USER_LIST_CURRENT' => '當前使用者列表',
297     -'DESCRIPTION' => '介紹',
298     -'DESTINATION' => '目的地',
299     -'DOMAIN_NAME' => '網域名稱',
300     -'DOMAIN' => '網域',
301     -'DOMAINS' => '眾網域',
302     -'DOWNLOAD' => '下載',
303     -'ERROR_UPDATING_CONFIGURATION' => '更新系統設定時錯誤。',
304     -'GROUP_MEMBERS' => '群組成員',
305     -'GROUP_NAME' => '群組名稱',
306     -'GROUPS' => '群組',
307     -'IP_ADDRESS' => 'IP 地址',
308     -'IP_ADDRESS_OR_FQDN' => 'IP地址或FQDN',
309     -'USER_INVALID' => '無效使用者',
310     -'LOCATION' => '位置',
311     -'MB' => '百萬位元(Mb)',
312     -'MODIFY_USER_GROUP' => '修正使用者群組',
313     -'NAME' => '名稱',
314     -'PASSWORD_VERIFY_NEW' => '新密碼（驗證）：',
315     -'PASSWORD_NEW' => '新密碼：',
316     -'OFF' => '關閉',
317     -'OK' => '確定',
318     -'PASSWORD_OLD' => '舊密碼：',
319     -'ON' => '開啟',
320     -'PASSWORD' => '密碼',
321     -'PERFORM' => '執行',
322     -'RECONFIGURE' => '重新設定',
323     -'REMOVE_USER_GROUP' => '移除使用者群組',
324     -'PASSWORD_RESET' => '重設密碼',
325     -'RESTORE' => '還原',
326     -'SHUTDOWN' => '關閉系統',
327     -'SUCCESS' => '成功',
328     -'ACCOUNT_NAME_INVALID' => '輸入的帳號名稱無效。',
329     -'ACCOUNT_NAME_INVALID_CHARS' => '您輸入的帳號名稱包含無效字元。',
330     -'PASSWORD_OLD_INVALID_CHARS' => '您輸入的舊密碼包含無效字元。',
331     -'PASSWORD_INVALID_CHARS' => '您輸入的密碼包含無效字元。',
332     -'PASSWORD_VERIFY_ERROR' => '您輸入的密碼不符。',
333     -'ACCOUNT_USER_NONE' => '系統中無使用者帳號。',
334     -'ACCOUNT_GROUP_NONE' => '系統中無使用者群組。',
335     -'ERROR_INVALID_CHARS' => '描述涵蓋未預期字元。',
336     -'USER_NAME' => '使用者名稱',
337     -'YOUR_ACCOUNT' => '您的帳號：',
338     -'YOUR_ACCOUNT_INVALID' => '輸入的帳號名稱無效。',
339     -'PASSWORD_CHANGE_SUCCESS' => '您的密碼已修改成功。',
340     -'FM_NONBLANK' => '此區塊不能留白。',
341     -'FM_INTEGER' => '此區塊必須包含一個正整數。',
342     -'FM_NUMBER' => '此區塊必須包含一個數字。',
343     -'FM_WORD' => '此區塊必須看起來像個單一的字。',
344     -'FM_DATE' => '輸入的資料無法被解析為日期',
345     -'FM_CREDIT_CARD_NUMBER1' => '您必須輸入信用卡號碼',
346     -'FM_CREDIT_CARD_NUMBER2' => '信用卡號碼不應該包含數字、空格或破折號以外的其他字元',
347     -'FM_CREDIT_CARD_NUMBER3' => '字元長度至少為14個',
348     -'FM_CREDIT_CARD_NUMBER4' => '似非有效信用卡號碼',
349     -'FM_CREDIT_CARD_EXPIRY1' => '無輸入屆期日',
350     -'FM_CREDIT_CARD_EXPIRY2' => '屆期日格式須為MM/YY或MM/YYYY',
351     -'FM_CREDIT_CARD_EXPIRY3' => '似乎已過屆期日',
352     -'FM_CREDIT_CARD_EXPIRY4' => '未來屆期日似乎太長',
353     -'FM_ISO_COUNTRY_CODE1' => '您必須提供國碼',
354     -'FM_ISO_COUNTRY_CODE2' => '此欄位不包含ISO國碼',
355     -'FM_US_STATE' => '此似非有效2位元美國州縮寫',
356     -'FM_US_ZIPCODE' => '美國郵遞區號必須包含5或9個數字',
357     -'FM_MINLENGTH1' => '以{$minlength}指定的最小長度是無意義的。',
358     -'FM_MINLENGTH2' => '此區段最少需要{$minlength}個字元。',
359     -'FM_MAXLENGTH1' => '以{$maxlength}指定的最大長度是無意義的。',
360     -'FM_MAXLENGTH2' => '此區段不得超過{$maxlength}個字元。',
361     -'FM_EXACTLENGTH1' => '您必須為此區段指定長度。',
362     -'FM_EXACTLENGTH2' => '您必須以整數為此區段指定準確長度。',
363     -'FM_EXACTLENGTH3' => '此區段必須確定為{$exactlength}個字元。',
364     -'FM_LENGTHRANGE1' => '您必須為此區段指定最大與最小長度。',
365     -'FM_LENGTHRANGE2' => '您必須以整數為此區段指定最大與最小長度。',
366     -'FM_LENGTHRANGE3' => '此區段必須介於 {$minlength}與{$maxlength}個字元。',
367     -'FM_URL' => '此區段的URL必須以http://或ftp://開頭',
368     -'FM_EMAIL_SIMPLE1' => '您必須輸入一個電郵地址。',
369     -'FM_EMAIL_SIMPLE2' => '此區段不似RFC822相容的電郵地址',
370     -'FM_DOMAIN_NAME' => '此區段不似有效的網際網路網域名稱或主機名稱。',
371     -'FM_IP_NUMBER1' => '此區段必須包含一個有效的IP位址且不能留白。',
372     -'FM_IP_NUMBER2' => '無效的IP位址格式（例如X.X.X.X）',
373     -'FM_IP_NUMBER3' => '{$octet}大於255',
374     -'FM_USERNAME' => '此區塊需類有效使用者名稱（3到8個字母和數字）',
375     -'FM_PASSWORD1' => '您需提供密碼。',
376     -'FM_PASSWORD2' => '您提供的密碼不佳。良好的密碼需涵蓋以下：大小寫字母、數字、特殊字元，以及至少7個字元。',
377     -'FM_MAC_ADDRESS1' => '您需提供MAC位址。',
378     -'FM_MAC_ADDRESS2' => '您提供的MAC位址無效。',
379     -'FM_ERR_UNEXPECTED_DESC' => '錯誤：描述中涵蓋未知字元或遺失字元。',
380     -'CSRF_VALIDATION_FAILURE' => 'Error: CSRF token is invalid or outdated.',
381     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Hostentries/hostentries_fr.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Hostentries/hostentries_fr.lex
382     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Hostentries/hostentries_fr.lex 2021-06-03 17:31:23.000000000 +0400
383     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Hostentries/hostentries_fr.lex 2021-06-07 22:20:51.634000000 +0400
384     @@ -1,5 +1,5 @@
385     'hos_FORM_TITLE' => 'Gestion des noms d\'hôte et des adresses',
386     -'Hostnames and addresses' => 'Gestion des noms d\'hôte et des adresses',
387     +'Hostnames and addresses' => 'Gestion des noms d hôte et des adresses',
388     'hos_UNABLE_TO_OPEN_CONFIGDB' => 'Impossible d\'ouvrir la base de données de configuration.',
389     'hos_DNS_FORWARDER_ENABLED' => 'Un achemineur DNS a été configuré. Cela signifie que toutes les résolutions DNS seront traitées par cet achemineur. Les noms et les adresses d\'hôte ne peuvent être modifiés sur ce serveur lorsqu\'un achemineur DNS est configuré.',
390     'hos_ADD_HOSTNAME' => 'Ajouter un nom d\'hôte',
391     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Workgroup/workgroup_fr.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Workgroup/workgroup_fr.lex
392     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Workgroup/workgroup_fr.lex 2021-06-03 17:31:23.000000000 +0400
393     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Workgroup/workgroup_fr.lex 2021-06-08 20:50:39.749000000 +0400
394     @@ -1,5 +1,5 @@
395     'wkg_FORM_TITLE' => 'Configuration des paramètres du groupe de travail ou du domaine Windows',
396     -'wkg_DESC_WORKGROUP' => ' Tapez le nom du <b>groupe de travail ou du domaine Windows</b> dans lequel ce serveur doit apparaître. ',
397     +'wkg_DESC_WORKGROUP' => ' Tapez le nom du groupe de travail ou du domaine Windows dans lequel ce serveur doit apparaître. ',
398     'wkg_LABEL_WORKGROUP' => 'Groupe de travail ou domaine Windows',
399     'wkg_DESC_SERVERNAME' => 'Tapez le nom que ce serveur doit utiliser pour le partage de fichiers Windows et Macintosh.',
400     'wkg_LABEL_SERVERNAME' => 'Nom du serveur',
401     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Yum/yum_fr.lex smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Yum/yum_fr.lex
402     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Yum/yum_fr.lex 2021-06-03 21:49:50.000000000 +0400
403     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr/I18N/Modules/Yum/yum_fr.lex 2021-06-07 22:43:01.270000000 +0400
404     @@ -39,6 +39,7 @@
405     'yum_BUTTON_CONFIGURATION' => 'Modifier les paramètres de mise à jour logicielle',
406     'yum_BUTTON_INSTALL_AVAILABLE' => 'Installer une aplication additionnelle',
407     'yum_BUTTON_REMOVE' => 'Retirer une application installée',
408     -'yum_DESC_UPTODATE' => 'All updates have been installed.',
409     +'yum_DESC_UPTODATE' => 'Toutes les mises à jour ont été installées.',
410     +'yum_TITLE_UPTODATE' => 'Ce système est à jour.',
411     'yum_TITLE_UPDATES_AVAILABLE' => 'Des mises à jour sont disponibles',
412     'yum_BUTTON_INSTALL_UPDATES' => 'Lister les mises à jour disponibles',
413     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr.pm smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr.pm
414     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/lib/SrvMngr.pm 2021-06-03 19:40:23.000000000 +0400
415     +++ smeserver-manager-0.1.2/root/usr/share/smanager/lib/SrvMngr.pm 2021-06-07 20:03:26.659000000 +0400
416     @@ -23,7 +23,7 @@
417     use SrvMngr::Model::Main;
418    
419    
420     -our $VERSION = '1.210';
421     +our $VERSION = '1.211';
422     $VERSION = eval $VERSION;
423    
424     use Exporter 'import';
425     @@ -180,8 +180,12 @@
426    
427     $self->plugin('RenderFile');
428    
429     - # CSRF protec if production
430     -# $self->plugin('Mojolicious::Plugin::CSRFDefender') if ( $self->mode eq 'production' );
431     + # CSRF protection if production mode
432     + $self->plugin('Mojolicious::Plugin::CSRFDefender' => {
433     + onetime => 1,
434     + error_status => 400,
435     + error_template => 'csrf_400'
436     + }) if ( $self->mode eq 'production' );
437    
438     $self->plugin('SrvMngr::Plugin::I18N' => {namespace => 'SrvMngr::I18N', default => 'en'});
439    
440     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/script/daily.sh smeserver-manager-0.1.2/root/usr/share/smanager/script/daily.sh
441     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/script/daily.sh 1970-01-01 04:00:00.000000000 +0400
442     +++ smeserver-manager-0.1.2/root/usr/share/smanager/script/daily.sh 2021-06-07 19:45:40.761000000 +0400
443     @@ -0,0 +1,19 @@
444     +#! /bin/bash
445     +
446     +#> unshift secrets values
447     +#> refresh Routes base
448     +#> expand smanager.conf et reload service
449     +
450     +SCRIPT_DIR='/usr/share/smanager/script'
451     +
452     +# unshift secrets value
453     +$SCRIPT_DIR/secrets.pl
454     +
455     +# refresh routes database
456     +$SCRIPT_DIR/routes.pl
457     +
458     +# smanager config files and databases
459     +/sbin/e-smith/expand-template $SCRIPT_DIR/../conf/srvmngr.conf
460     +/sbin/e-smith/signal-event smanager-refresh
461     +
462     +exit 0
463     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/script/routes.pl smeserver-manager-0.1.2/root/usr/share/smanager/script/routes.pl
464     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/script/routes.pl 1970-01-01 04:00:00.000000000 +0400
465     +++ smeserver-manager-0.1.2/root/usr/share/smanager/script/routes.pl 2021-06-07 20:18:50.265000000 +0400
466     @@ -0,0 +1,34 @@
467     +#! /usr/bin/perl -w
468     +
469     +# purge Routes database (uninstalled contribs)
470     +
471     +use strict;
472     +use warnings;
473     +
474     +use esmith::ConfigDB;
475     +
476     +use constant WEBFUNCTIONS => '/usr/share/smanager/lib/SrvMngr/Controller/';
477     +
478     +my $rtdb = esmith::ConfigDB->open('routes') or
479     + die "Couldn't access Routes database\n";
480     +
481     +my @routes = $rtdb->get_all_by_prop( type => 'route' );
482     +
483     +exit 0 unless @routes;
484     +
485     +my ($sv_contrib, $sv_exist, $file) = '';
486     +
487     +for (@routes) {
488     + my ( $contrib, $name ) = split ( /\+/, $_->key);
489     +
490     + if ( $contrib ne $sv_contrib) {
491     + $sv_contrib = $contrib;
492     + $file = WEBFUNCTIONS . ucfirst($contrib) .'.pm';
493     + $sv_exist = ( -f $file ) ? 1 : 0;
494     + }
495     + # print("$contrib $file deleted \n") unless $sv_exist;
496     + $rtdb->get($_->key)->delete() unless $sv_exist;
497     +
498     +}
499     +
500     +exit 0;
501     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/script/secrets.pl smeserver-manager-0.1.2/root/usr/share/smanager/script/secrets.pl
502     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/script/secrets.pl 1970-01-01 04:00:00.000000000 +0400
503     +++ smeserver-manager-0.1.2/root/usr/share/smanager/script/secrets.pl 2021-06-07 19:47:59.370000000 +0400
504     @@ -0,0 +1,53 @@
505     +#! /bin/env perl
506     +
507     +# unshift secrets values
508     +# 3 secrets values (first one for encrypt, all 3 for decrypt)
509     +# new value added each day as first one
510     +
511     +use strict;
512     +use warnings;
513     +
514     +use esmith::ConfigDB;
515     +
516     +sub gen_pwd {
517     + use MIME::Base64 qw(encode_base64);
518     + my $p = "not set due to error";
519     + if ( open( RANDOM, "/dev/urandom" ) ){
520     + my $buf;
521     + # 57 bytes is a full line of Base64 coding, and contains
522     + # 456 bits of randomness - given a perfectly random /dev/random
523     + if ( read( RANDOM, $buf, 57 ) != 57 ){
524     + warn("Short read from /dev/random: $!");
525     + } else {
526     + $p = encode_base64($buf);
527     + chomp $p;
528     + }
529     + close RANDOM;
530     + } else {
531     + warn "Could not open /dev/urandom: $!";
532     + }
533     + return $p;
534     +}
535     +
536     +my $cdb = esmith::ConfigDB->open() || die "Couldn't open config db";
537     +
538     +my $pwds = $cdb->get_prop('smanager','Secrets');
539     +
540     +if ( $pwds ){
541     + my @secrets = split /,/, $pwds;
542     + my $newpwd = gen_pwd();
543     + if ( $newpwd ) {
544     + $secrets[2] = $secrets[1] if ( $secrets[1] );
545     + $secrets[1] = $secrets[0];
546     + $secrets[0] = $newpwd;
547     + my $secret = join ',', @secrets;
548     + $cdb->get('smanager')->set_prop('Secrets', $secret);
549     + print("Secret values unshifted\n");
550     + } else {
551     + print("Secret generation error\n");
552     + }
553     +} else {
554     + print("Error while unshifting secrets values\n");
555     +}
556     +
557     +exit 0
558     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/bugreport.html.ep smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/bugreport.html.ep
559     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/bugreport.html.ep 2021-06-03 17:31:23.000000000 +0400
560     +++ smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/bugreport.html.ep 2021-06-08 20:19:07.125000000 +0400
561     @@ -21,11 +21,14 @@
562     <p>
563     %=l ('bugr_SME_EXPERIENCE')
564     </p><p>
565     - %=l ('bugr_PLEASE_REPORT_HERE')
566     - </p><p>
567     %=l ('bugr_USE_TEMPLATE')
568     +: <a href="https://wiki.koozali.org/Bugzilla_Help#Reporting_Bugs"
569     + target="_blank">https://wiki.koozali.org/Bugzilla_Help#Reporting_Bugs</a>.
570     </p><p>
571     - %=l ('bugr_FOLLOWING_REPORT_MIGHT_HELP')
572     + %=l ('bugr_PLEASE_REPORT_HERE')
573     +: <a href="https://bugs.koozali.org" target="_blank">https://bugs.koozali.org</a>.
574     + </p><p>
575     + %=l ('bugr_FOLLOWING_REPORT_MIGHT_HELP')
576     </p><p>
577     %=l ('bugr_REPORT_CONTENT')
578     <br><ul><li>
579     @@ -77,4 +80,4 @@
580    
581     </div>
582    
583     -%end
584     \ Pas de fin de ligne à la fin du fichier
585     +%end
586     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/csrf_400.html.ep smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/csrf_400.html.ep
587     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/csrf_400.html.ep 1970-01-01 04:00:00.000000000 +0400
588     +++ smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/csrf_400.html.ep 2021-06-07 00:13:48.000000000 +0400
589     @@ -0,0 +1,10 @@
590     +% layout 'default', title => "Sme server 2 - err 400";
591     +
592     +% content_for 'module' => begin
593     +<div id="module">
594     + <div class=sme-error>
595     + %= l 'CSRF_VALIDATION_FAILURE'
596     + </div>
597     +
598     +</div>
599     +% end
600     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/partials/_dom_list.html.ep smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/partials/_dom_list.html.ep
601     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/partials/_dom_list.html.ep 2020-11-19 11:53:26.000000000 +0400
602     +++ smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/partials/_dom_list.html.ep 2021-06-07 22:23:32.322000000 +0400
603     @@ -96,10 +96,6 @@
604     %= submit_button "$btn2", class => 'action'
605     </p>
606    
607     - <p>
608     - %= l 'dom_BUTTON_CORPORATE_DNS'
609     - </p>
610     -
611     %= hidden_field 'trt' => 'UP2'
612    
613     % end
614     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/partials/_footer.html.ep smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/partials/_footer.html.ep
615     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/partials/_footer.html.ep 2021-06-03 17:31:23.000000000 +0400
616     +++ smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/partials/_footer.html.ep 2021-06-08 19:33:26.282000000 +0400
617     @@ -4,5 +4,5 @@
618     SME Server <%= session 'releaseVersion' %> - Manager <%= $c->app->VERSION %>
619     <br>Copyright 1999-2006 Mitel Corporation<br>
620     %= session 'copyRight'
621     -<br>Copyright (c) 2013-2016 Koozali Foundation Inc.<br>
622     +<br>Copyright (c) 2013-2021 Koozali Foundation Inc.<br>
623     </font>
624     diff -urN smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/workgroup.html.ep smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/workgroup.html.ep
625     --- smeserver-manager-0.1.2.old/root/usr/share/smanager/themes/default/templates/workgroup.html.ep 2020-11-19 11:53:26.000000000 +0400
626     +++ smeserver-manager-0.1.2/root/usr/share/smanager/themes/default/templates/workgroup.html.ep 2021-06-07 22:37:22.385000000 +0400
627     @@ -37,7 +37,7 @@
628     </span>
629     </p>
630     <p>
631     - %=l 'wkg_DESC_PDC', class => 'desc'
632     + %= $c->render_to_string(inline => l 'wkg_DESC_PDC')
633     <br>
634     <span class=label>
635     %=l 'wkg_LABEL_PDC', class => 'label'
636     @@ -47,7 +47,7 @@
637     </span>
638     </p>
639     <p>
640     - %=l 'wkg_DESC_ROAM', class => 'desc'
641     + %= $c->render_to_string(inline => l 'wkg_DESC_ROAM')
642     <br>
643     <span class=label>
644     %=l 'wkg_LABEL_ROAM', class => 'label'
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed