fail2ban / ldap login failure
4 Aug
2023
4 Aug
'23
11:12 p.m.
[Debian Bookworm + Dovecot 2] I have user database in ldap (samba). I want to use fail2ban to restrict unsuccessful login attempts, but... I cannot see "Authentication failure" message in ANY log. (/var/log/mail.log shows successful logins as well as disconnects.) How should I proceed?
5 Aug
5 Aug
11:37 a.m.
I have user database in ldap (samba). I want to use fail2ban to restrict unsuccessful login attempts, but... I cannot see "Authentication failure" message in ANY log. (/var/log/mail.log shows successful logins as well as disconnects.) How should I proceed?
Check your dovecot.log
dovecot: imap-login: Aborted login (auth failed, 2 attempts in 4 secs): user=<xxxxxxx>, rip=xxxxxxxx
474
Age (days ago)
475
Last active (days ago)
1 comments
2 participants
participants (2)
-
Marc
-
micha＠micha.waw.pl