Implement fail2ban clients on servers about ansible-roadshow

[tobiasehlert]

you can even role this out by using ansible ;)

[mglantz]

Hey @tobiasehlert, thanks for contributing. We considered this, or pam_shield. But the challenge is that students most likely would lock themselfs out. Consider that a student can run a playbook repeatedly and then getting banned. We're leaning to AWS security group fix, or simply changing default port for SSH.

[tobiasehlert]

@mglantz, well, there is a way again. You can whitelist the ansible tower server in the destination hosts, and therefore your students won't be locked out, when running their playbooks.