Date: Sat, 12 Aug 2006 01:00:34 GMT From: "Skye Poier" <spoier@gmail.com> To: freebsd-bugs@FreeBSD.org Subject: Re: conf/91732: [patch] 800.loginfail: fix log message grep expression Message-ID: <200608120100.k7C10Yq6044666@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR conf/91732; it has been noted by GNATS.
From: "Skye Poier" <spoier@gmail.com>
To: bug-followup@FreeBSD.org, doconnor@gsoft.com.au
Cc:
Subject: Re: conf/91732: [patch] 800.loginfail: fix log message grep expression
Date: Fri, 11 Aug 2006 17:58:21 -0700
I noticed the same problem; although I was primarily worried about not
seeing ssh login failures in the security report. I discovered it was
because "fail" no longer appears in the auth.log line on my FreeBSD
6.1 installation:
Aug 11 08:39:20 hostname sshd[48839]: error: PAM: authentication error
for someuser from somewhere.pacbell.net
I simply modified the grep in 800.loginfail to read:
n=$(catmsgs | grep -ia "^$yesterday.*\(fail\|authentication error\)" |
tee /dev/stderr | wc -l)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200608120100.k7C10Yq6044666>