2016-07-08 01:50:57 +00:00
|
|
|
# slapd (Stand-alone LDAP Daemon) openldap daemon filter
|
|
|
|
|
#
|
|
|
|
|
# Detecting invalid credentials: error code 49
|
|
|
|
|
# http://www.openldap.org/doc/admin24/appendix-ldap-result-codes.html#invalidCredentials (49)
|
|
|
|
|
|
2016-07-08 02:29:51 +00:00
|
|
|
[INCLUDES]
|
|
|
|
|
|
|
|
|
|
# Read common prefixes. If any customizations available -- read them from
|
|
|
|
|
# common.local
|
|
|
|
|
before = common.conf
|
|
|
|
|
|
2016-07-08 01:50:57 +00:00
|
|
|
[Definition]
|
|
|
|
|
|
2016-07-08 02:29:51 +00:00
|
|
|
_daemon = slapd
|
|
|
|
|
|
2023-10-18 14:06:56 +00:00
|
|
|
prefregex = ^%(__prefix_line)sconn=<F-MLFID>\d+</F-MLFID>(?: (?:fd|op)=\d+){0,2} (?=ACCEPT|RESULT)<F-CONTENT>.+</F-CONTENT>$
|
2016-07-08 01:50:57 +00:00
|
|
|
|
2023-10-18 14:06:56 +00:00
|
|
|
failregex = ^<F-NOFAIL>ACCEPT</F-NOFAIL> from IP=<ADDR>:\d{1,5}\s+
|
|
|
|
|
^RESULT(?:\s(?!err)\S+=\S*)* err=49\b
|
2016-07-08 01:50:57 +00:00
|
|
|
|
2023-10-18 14:06:56 +00:00
|
|
|
ignoreregex =
|
2016-07-08 01:50:57 +00:00
|
|
|
|
2023-10-18 14:06:56 +00:00
|
|
|
# Author: Andrii Melnyk, Sergey G. Brester
|
