Issue How to enable fail2ban for fellow other admins using the restricted mode?

[MHC_1]

Server operating system version

Almalinux 9.2

Plesk version and microupdate number

18

How to set that other admin level Plesk users are able to also set and unblock IPs on the fail2ban system?

I can set/clear IP Blocks when logged in as the primary admin, but other admins have a fail2ban button on their log in but the button only goes to a "permission denied" screen.

The "restricted mode" documentation (as with most plesk documentation) is extremely poor and doesn't intuitively show how to do this.

Various Plesk settings such as allowing IP stuff on the Restricted Mode control are enabled, which seems logical, but no ability for fellow admins to access FAil2ban.

How do we fix this?

 

[MHC_1]

Very similar to this request: Add/remove Fail2ban for additional Administrator accounts .

And that was back in 2020, surely there's been progress since then?

 

[MHC_1]

Any ideas?

 

[Sebahat.hadzhi]

Hello, @MHC_1 . Could you please double-check in Tools & Settings > Restricted Mode Settings > Administrative Tools if you have "Server settings" enabled? If enabled, the additional admin accounts should be able to access Fail2Ban and manage IP bans. As for the linked UserVoice request, ability to enable/disable Fail2ban management access on a per-admin account basis hasn't been introduced yet.

 

[MHC_1]

@Sebahat.hadzhi thank you that has resolved it. What does the option "Server Settings" actually specifically enable ?

Is there any documentation to show what actual things each of the options on the Restricted Mode settings choices actually effects? I would have found this button if it had a subtitle outlining all the aspects it relates to.

 

[Sebahat.hadzhi]

This is sort of a workaround to enable Fail2ban as the functionality is not natively supported. The setting also controls the following:

• Web Application Firewall (ModSecurity)
• Restrict Creation of Subzones
• Prohibited Domain Names
• Server Settings
• Customize Plesk URL
• Server Statistics Settings

I do not believe the public documentation covers that or the rest of the available settings in restricted mode. I will double-check with our team if documenting every individual setting is possible.