Your message dated Mon, 7 Jul 2008 20:28:28 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Re: Bug#459876: ignore.d.server/krb5kdc: new file & new rules
has caused the Debian Bug report #459876,
regarding ignore.d.server/krb5kdc: new file & new rules
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
459876: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459876
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: logcheck-database
Version: 1.2.54
Severity: wishlist


I'm using krb5-kdc (krb5kdc daemon name). I'd like to have added my rules for 
this daemon.

Sample syslog entries:
Jan  9 09:36:57 server krb5kdc[2705]: DISPATCH: repeated (retransmitted?) 
request from 192.168.1.14, resending previous response
Jan  9 09:36:57 server krb5kdc[2705]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 
192.168.1.14: ISSUE: authtime 1199867817, etypes {rep=16 tkt=16 ses=16}, [EMAIL 
PROTECTED] for krbtgt/[EMAIL PROTECTED]
Jan  9 09:36:57 server krb5kdc[2705]: TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 
192.168.1.14: ISSUE: authtime 1199867817, etypes {rep=16 tkt=16 ses=16}, [EMAIL 
PROTECTED] for nfs/[EMAIL PROTECTED]
Jan  9 09:36:58 server krb5kdc[2705]: AS_REQ (3 etypes {18 17 16}) 
192.168.1.14: NEEDED_PREAUTH: [EMAIL PROTECTED] for krbtgt/[EMAIL PROTECTED], 
Additional pre-authentication required
Jan  9 09:36:58 server krb5kdc[2705]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 
192.168.1.14: ISSUE: authtime 1199867818, etypes {rep=16 tkt=16 ses=16}, 
nfs/[EMAIL PROTECTED] for krbtgt/[EMAIL PROTECTED]
Jan  9 09:36:58 server krb5kdc[2705]: TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 
192.168.1.14: ISSUE: authtime 1199867818, etypes {rep=16 tkt=16 ses=16}, [EMAIL 
PROTECTED] for HTTP/[EMAIL PROTECTED]
Jan  9 09:36:58 server krb5kdc[2705]: AS_REQ (1 etypes {13}) 192.168.1.14: 
NEEDED_PREAUTH: [EMAIL PROTECTED] for krbtgt/[EMAIL PROTECTED], Additional 
pre-authentication required

New rules for new file ignore.d.server/krb5kdc:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: (AS|TGS)_REQ \([0-9]+ 
etypes {[0-9\ ]+}\) [0-9\.]{7,15}: ISSUE: authtime [0-9]+, etypes {rep=[0-9]+ 
tkt=[0-9]+ ses=[0-9]+}, [[:alnum:]@/\._\-]+ for [[:alnum:]@/\._\-]+
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: (AS|TGS)_REQ \([0-9]+ 
etypes {[0-9\ ]+}\) [0-9\.]{7,15}: NEEDED_PREAUTH: [[:alnum:]@/\._\-]+ for 
[[:alnum:]@/\._\-]+, Additional pre-authentication required
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: DISPATCH: repeated 
\(retransmitted\?\) request from [0-9\.]{7,16}, resending previous response$

- Thomas


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable'), (100, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.22-3-amd64
Locale: LANG=de_CH.UTF-8, LC_CTYPE=de_CH.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]        1.5.11etch1 Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information excluded



--- End Message ---
--- Begin Message ---
* Thomas Mueller <[EMAIL PROTECTED]> [2008-01-09 09:55:22 CET]:
> I'm using krb5-kdc (krb5kdc daemon name). I'd like to have added my rules for 
> this daemon.
> 
> Sample syslog entries:
> 
> New rules for new file ignore.d.server/krb5kdc:

* Frédéric Brière <[EMAIL PROTECTED]> [2008-03-16 22:02:20 CET]:
> # Commit d5ceb6505f6a9a88bcb2b1139cfdba7b5fa06db7
> tag 459876 pending

 That commit was part of the 1.2.64 release - thus I'm closing the bug
with that version.

 So long,
Rhonda


--- End Message ---
_______________________________________________
Logcheck-devel mailing list
Logcheck-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to