SF.net SVN: logwatch:[270] trunk/scripts/services/evtsecurity

Revision: 270
          http://sourceforge.net/p/logwatch/code/270
Author:   opoplawski
Date:     2014-12-11 16:54:56 +0000 (Thu, 11 Dec 2014)
Log Message:
-----------
[evtsecurity] Handle account locked authentication failures

Modified Paths:
--------------
    trunk/scripts/services/evtsecurity

Modified: trunk/scripts/services/evtsecurity
===================================================================
--- trunk/scripts/services/evtsecurity	2014-12-11 16:43:42 UTC (rev 269)
+++ trunk/scripts/services/evtsecurity	2014-12-11 16:54:56 UTC (rev 270)
@@ -30,6 +30,7 @@
 my %UnknownClient;
 my %BadPasswords;
 my %TicketExpired;
+my %AccountLocked;
 my %ExpiredPassword;
 my %OtherList;
 
@@ -108,6 +109,9 @@
          } elsif ($FailureCode eq "0xc0000071") {
             # expired password
             $ExpiredPassword{"$Account $Client"}++;
+         } elsif ($FailureCode eq "0xc0000234") {
+            # account locked
+            $AccountLocked{"$UserName $Client"}++;
          } else {
             $FailureAudits{"$Hostname $ExpandedString\n$url"}++;
          }
@@ -129,6 +133,13 @@
    }
 }
 
+if (keys %AccountLocked) {
+   print "\nAccount Locked\n";
+   foreach my $Account (sort keys %AccountLocked) {
+      print "    $Account : $AccountLocked{$Account} Times\n";
+   }
+}
+
 if (keys %ExpiredPassword) {
    print "\nPassword Expired\n";
    foreach my $Account (sort keys %ExpiredPassword) {

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk