[Logcheck-devel] Bug#445072: /etc/logcheck/violations.ignore.d/logcheck-ssh: Failed password for ...

[Frédéric Brière]

On Tue, Oct 02, 2007 at 10:58:32PM -0400, Frédéric Brière wrote:
> Somewhere between etch and now, ssh stopped reporting failed passwords
> as "error: PAM: Authentication failure for foo", and switched to "Failed
> password for foo", similar to what it already did for unknown users, but

I was actually mistaken -- even etch logs such attempts as "Failed
password".  (Except when *I* try it, at which point I still get the PAM
error, for some mysterious reason.)


-- 
<liiwi> udp - universal dropping of an pigeon