[Logcheck-commits] r1266 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server rulefiles/linux/violations.ignore.d

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2006-10-19 07:49:40 +0000 (Thu, 19 Oct 2006)
New Revision: 1266

Added:
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-saslauthd
Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/debian/logcheck-database.lintian-overrides
   logcheck/trunk/rulefiles/linux/ignore.d.server/saslauthd
Log:
* ignore.d.server/saslauthd, violations-ignore.d/logcheck-saslauthd: ignore
  messages about unknown users or invalid passwords (closes: #369486).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-10-19 07:47:29 UTC (rev 1265)
+++ logcheck/trunk/debian/changelog	2006-10-19 07:49:40 UTC (rev 1266)
@@ -12,8 +12,10 @@
     (closes: #377381).
   * violations.ignore.d/logcheck-postfix: ignore generic 554 messages during
     CONNECT; thanks to Martin Lohmeier (closes: #373174).
+  * ignore.d.server/saslauthd, violations-ignore.d/logcheck-saslauthd: ignore
+    messages about unknown users or invalid passwords (closes: #369486).
 
- -- martin f. krafft <madduck at debian.org>  Thu, 19 Oct 2006 09:46:43 +0200
+ -- martin f. krafft <madduck at debian.org>  Thu, 19 Oct 2006 09:48:41 +0200
 
 logcheck (1.2.49~unreleased.2) UNRELEASED; urgency=low
 

Modified: logcheck/trunk/debian/logcheck-database.lintian-overrides
===================================================================
--- logcheck/trunk/debian/logcheck-database.lintian-overrides	2006-10-19 07:47:29 UTC (rev 1265)
+++ logcheck/trunk/debian/logcheck-database.lintian-overrides	2006-10-19 07:49:40 UTC (rev 1266)
@@ -20,6 +20,7 @@
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-proftpd 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-pureftp 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-samba 0640 != 0644
+logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-saslauthd 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-sendmail_tmp 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-smartd 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-spamd 0640 != 0644

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/saslauthd
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/saslauthd	2006-10-19 07:47:29 UTC (rev 1265)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/saslauthd	2006-10-19 07:49:40 UTC (rev 1266)
@@ -1,2 +1,4 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd+\[[0-9]+\]: Domain/Realm not available\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd+\[[0-9]+\]: DIGEST-MD5 client step [0-9]+$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: \(pam_unix\) check pass; user unknown$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: do_request[[:space:]]*: NULL password received$

Added: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-saslauthd
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-saslauthd	                        (rev 0)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-saslauthd	2006-10-19 07:49:40 UTC (rev 1266)
@@ -0,0 +1,2 @@
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: do_auth[[:space:]]*: auth failure: \[user=[._[:alnum:]-]+\] \[service=smtp\] \[realm=[._[:alnum:]-]+\] \[mech=pam\] \[reason=PAM auth error\]$