Bug#588285: [Logcheck-devel] Bug#588285: logcheck: Additional rules to ignore successful kerberos authentication

2010-07-08 Thread Michel Messerschmidt
On Tue, Jul 06, 2010 at 06:26:10PM -0700, Russ Allbery wrote: I wonder if the right way of handling this would be to instead install a logcheck rule as part of the libpam-krb5 package that looks something like: ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ [[:alnum:]]+(\[[0-9]+\])?:

Bug#588285: [Logcheck-devel] Bug#588285: logcheck: Additional rules to ignore successful kerberos authentication

2010-07-08 Thread Hannes von Haugwitz
Michel Messerschmidt wrote: On Tue, Jul 06, 2010 at 06:26:10PM -0700, Russ Allbery wrote: I wonder if the right way of handling this would be to instead install a logcheck rule as part of the libpam-krb5 package that looks something like: ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+

Bug#588285: [Logcheck-devel] Bug#588285: logcheck: Additional rules to ignore successful kerberos authentication

2010-07-07 Thread Michel Messerschmidt
On Tue, Jul 06, 2010 at 06:26:10PM -0700, Russ Allbery wrote: I wonder if the right way of handling this would be to instead install a logcheck rule as part of the libpam-krb5 package that looks something This would be the preferred solution for me. I just haven't found a way to configure

Bug#588285: [Logcheck-devel] Bug#588285: logcheck: Additional rules to ignore successful kerberos authentication

2010-07-07 Thread Russ Allbery
Michel Messerschmidt li...@michel-messerschmidt.de writes: On Tue, Jul 06, 2010 at 06:26:10PM -0700, Russ Allbery wrote: I wonder if the right way of handling this would be to instead install a logcheck rule as part of the libpam-krb5 package that looks something This would be the preferred

Bug#588285: [Logcheck-devel] Bug#588285: logcheck: Additional rules to ignore successful kerberos authentication

2010-07-06 Thread Russ Allbery
Michel Messerschmidt li...@michel-messerschmidt.de writes: Many of my logcheck reports are triggered by regular user authentication against kerberos enabled services. Here are rules to ignore authentication success messages for some common daemons. violations.ignore.d/logcheck-sudo: ^\w{3}