[Samba] Fail2Ban for AD

[Andrew Bartlett]

On Sat, 2021-12-11 at 22:33 -0500, Philippe LeCavalier via samba wrote:
> On Sat, Dec 11, 2021 at 4:23 AM Andrea Venturoli via samba <
> samba at lists.samba.org> wrote:
> 
> > On 12/11/21 01:33, Philippe LeCavalier via samba wrote:
> > > Hi,
> > 
> > Hello.
> > 
> > 
> > 
> > > Has anyone here implemented fail2ban? If so, what has your
> > > experience
> > been
> > > thus far?
> > 
> > What for? Failed authentications?
> > 
> > 
> > Or ransomware protection?
> > 
> No just for failed logins . The lockout will create DoS and I'm
> seeing way more failed logins than I like.

https://wiki.samba.org/index.php/Setting_up_Audit_Logging was
specifically intended to provide enough detail to allow this kind of
thing.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions