Fail2ban is logging false positive with authentication using pam ldap. What happen is a user login using his ldap password cause pam_unix to fail then pam_ldap log the user in. sshd filter for fail2ban read /var/log/secure see the pam_unix error, f..

Read more