From: [email protected]

Package: logcheck
Version: 1.2.24
Severity: wishlist

pam_winbind, part of the Winbind package which works with Samba
generates various messages to auth.log. The most common of these
messages is not ignored by logcheck, but probably should be.

Example:
Aug 17 14:49:51 wardrobe pam_winbind[31161]: user 'joeuser' granted
acces


Other messages are also generated, but should probably *not* be ignored
(?):

Aug 7 07:35:09 wardrobe pam_winbind[19822]: request failed: Wrong
Password, PAM
error was 7, NT error was NT_STATUS_WRONG_PASSWORD


Aug 7 07:35:46 wardrobe pam_winbind[19829]: request failed: Account
locked out, PAM
error was 11, NT error was NT_STATUS_ACCOUNT_LOCKED_OUT


Aug 9 20:51:38 wardrobe pam_winbind[24950]: request failed: Password
expired, PAM error was 27, NT error was NT_STATUS_PASSWORD_EXPIRED


Aug 13 15:14:36 wardrobe pam_winbind[1108]: request failed: Must change password,
PAM error was 12, NT error was NT_STATUS_PASSWORD_MUST_CHANGE

etc.

Thank you for your help!
Sam


-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (650, 'testing'), (600, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.20-bf2.4
Locale: LANG=C, LC_CTYPE=C

Versions of packages logcheck depends on:
ii adduser 3.57 Add and remove users and groups
ii cron 3.0pl1-86 management of regular background p ii debconf [debconf 1.4.30 Debian configuration management sy ii debianutils 2.8.4 Miscellaneous utilities specific t ii lockfile-progs 0.1.10 Programs for locking and unlocking ii logcheck-databas 1.2.24 A database of system log rules for ii logtail 1.2.24 Print log file lines that have not ii mailx 1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii perl 5.8.4-2 Larry Wall's Practical Extraction ii qmail-run [mail- 1.1.0 sets up qmail as mail-transfer-age ii sysklogd [system 1.4.1-15 System Logging Daemon

-- debconf information:
logcheck/changes:
* logcheck/install-note:


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)