search

nextcloud / user_external

👥 External user authentication methods like IMAP, SMB and FTP
https://apps.nextcloud.com/apps/user_external
107 stars 64 forks source link

Documentation: warn about tools like fail2ban running on the auth servers #220

Closed jensb closed 3 months ago

jensb commented 1 year ago

I am using user_external to authenticate to an IMAP server (dovecot) which is protected by fail2ban, which inserts temporary firewall rules blocking IPs after a number of unsuccessful authentications.

But if the IP of your Nextcloud installation is blocked on the authenticating server due to one user failing to log in, nobody can log in any more. It's basically a self-inflicted DoS. The same goes for FTP, SMB or any other external authentication server.

So I would suggest to put a notice into the user_external documentation advising users to whitelist the Nextcloud IP if fail2ban or similar tools are being used. This may avoid confusion and save others some time, and I did not find anything related in the docs yet.

Thanks :-)

violoncelloCH commented 1 year ago

Hi, thanks for the suggestion ! That's a good point ! Would you mind opening a Pull Request for it ? :)