Hi, I have a filter-file which has for example this filter-line: ^%(pid)s login authenticator failed for\s+.*\[<HOST>\]: 435 Unable to authenticate at present \(set_id=<F-USER>.*</F-USER>\): failed to bind the LDAP connection to server ldap.(master|slave).ops.eusc.inter.net:389 - LDAP error 34: Invalid DN syntax\s*$
In my action, I have the following action: actionban = /usr/local/scripts/fail2sql.sh <name> ban <ip> <F-USER> The problem is that F-USER is not handed over to the action apparently. The regex matches though. I have another service where it works (dovecot) but not with this filter-file. What could be the problem? Is there any way to get from fail2ban-regex which fields it populates (are those fields, tags, what are they called?)? Best, Niels _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
