[Logcheck-devel] Bug#266432: logcheck: missing ignore pattern for pam_winbind

[Sam Snow]

Package: logcheck
Version: 1.2.24
Severity: wishlist

pam_winbind, part of the Winbind package which works with Samba
generates various messages to auth.log. The most common of these
messages is not ignored by logcheck, but probably should be. 

Example: 
Aug 17 14:49:51 wardrobe pam_winbind[31161]: user 'joeuser' granted
acces


Other messages are also generated, but should probably *not* be ignored
(?):

Aug  7 07:35:09 wardrobe pam_winbind[19822]: request failed: Wrong
Password, PAM
error was 7, NT error was NT_STATUS_WRONG_PASSWORD


Aug  7 07:35:46 wardrobe pam_winbind[19829]: request failed: Account
locked out, PAM
error was 11, NT error was NT_STATUS_ACCOUNT_LOCKED_OUT


Aug  9 20:51:38 wardrobe pam_winbind[24950]: request failed: Password 
expired, PAM error was 27, NT error was NT_STATUS_PASSWORD_EXPIRED


Aug 13 15:14:36 wardrobe pam_winbind[1108]: request failed: Must change
password,
PAM error was 12, NT error was NT_STATUS_PASSWORD_MUST_CHANGE

etc. 

Thank you for your help!
Sam


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (650, 'testing'), (600, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.20-bf2.4
Locale: LANG=C, LC_CTYPE=C

Versions of packages logcheck depends on:
ii  adduser          3.57                    Add and remove users and groups
ii  cron             3.0pl1-86               management of regular background p
ii  debconf [debconf 1.4.30                  Debian configuration management sy
ii  debianutils      2.8.4                   Miscellaneous utilities specific t
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.24                  A database of system log rules for
ii  logtail          1.2.24                  Print log file lines that have not
ii  mailx            1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii  perl             5.8.4-2                 Larry Wall's Practical Extraction 
ii  qmail-run [mail- 1.1.0                   sets up qmail as mail-transfer-age
ii  sysklogd [system 1.4.1-15                System Logging Daemon

-- debconf information:
  logcheck/changes:
* logcheck/install-note: