[Logcheck-devel] Bug#266432: logcheck: missing ignore pattern for pam_winbind
Sam Snow
snowsam at christianheritageschool.org
Tue Aug 17 21:09:55 UTC 2004
Package: logcheck
Version: 1.2.24
Severity: wishlist
pam_winbind, part of the Winbind package which works with Samba
generates various messages to auth.log. The most common of these
messages is not ignored by logcheck, but probably should be.
Example:
Aug 17 14:49:51 wardrobe pam_winbind[31161]: user 'joeuser' granted
acces
Other messages are also generated, but should probably *not* be ignored
(?):
Aug 7 07:35:09 wardrobe pam_winbind[19822]: request failed: Wrong
Password, PAM
error was 7, NT error was NT_STATUS_WRONG_PASSWORD
Aug 7 07:35:46 wardrobe pam_winbind[19829]: request failed: Account
locked out, PAM
error was 11, NT error was NT_STATUS_ACCOUNT_LOCKED_OUT
Aug 9 20:51:38 wardrobe pam_winbind[24950]: request failed: Password
expired, PAM error was 27, NT error was NT_STATUS_PASSWORD_EXPIRED
Aug 13 15:14:36 wardrobe pam_winbind[1108]: request failed: Must change
password,
PAM error was 12, NT error was NT_STATUS_PASSWORD_MUST_CHANGE
etc.
Thank you for your help!
Sam
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (650, 'testing'), (600, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.20-bf2.4
Locale: LANG=C, LC_CTYPE=C
Versions of packages logcheck depends on:
ii adduser 3.57 Add and remove users and groups
ii cron 3.0pl1-86 management of regular background p
ii debconf [debconf 1.4.30 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii lockfile-progs 0.1.10 Programs for locking and unlocking
ii logcheck-databas 1.2.24 A database of system log rules for
ii logtail 1.2.24 Print log file lines that have not
ii mailx 1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii perl 5.8.4-2 Larry Wall's Practical Extraction
ii qmail-run [mail- 1.1.0 sets up qmail as mail-transfer-age
ii sysklogd [system 1.4.1-15 System Logging Daemon
-- debconf information:
logcheck/changes:
* logcheck/install-note:
More information about the Logcheck-devel
mailing list