SF.net SVN: logwatch:[321] trunk/scripts/services/sudo

Revision: 321
          http://sourceforge.net/p/logwatch/code/321
Author:   opoplawski
Date:     2016-02-19 17:26:05 +0000 (Fri, 19 Feb 2016)
Log Message:
-----------
[sudo] Ignore pam_sss(sudo:auth): authentication success

Modified Paths:
--------------
    trunk/scripts/services/sudo

Modified: trunk/scripts/services/sudo
===================================================================
--- trunk/scripts/services/sudo	2016-02-19 17:25:11 UTC (rev 320)
+++ trunk/scripts/services/sudo	2016-02-19 17:26:05 UTC (rev 321)
@@ -80,12 +80,14 @@
      # handled in pam_unix
    } elsif ($ThisLine =~ /pam_unix\(sudo:auth\): auth could not identify password for/) {
      # handled in pam_unix
+   } elsif ($ThisLine =~ /pam_sss\(sudo:auth\): authentication success/) {
+     # Ignore
    } elsif ($ThisLine =~ /(.+): conversation failed/) {
      $ConFailed{$1}++;
    } elsif ( ($user, $error, $tty, $dir, $euser, $cmd, $args) = $ThisLine =~ m/^\s*(\S+) : (.*; )?TTY=(\S+) ; PWD=(.*?) ; USER=(\S+) ; COMMAND=(\S+)( ?.*)/) {
       next if (defined($IgnoreCmds{$user}{$euser}) && $cmd =~ join("|",@{$IgnoreCmds{$user}{$euser}}));
       next if (defined($IgnoreCmds{'any'}{$euser}) && $cmd =~ join("|",@{$IgnoreCmds{'any'}{$euser}}));
-      push @{$byUser{$user}{$euser}}, [$error . $cmd,$args, $dir, $tty];
+      push @{$byUser{$user}{$euser}}, [$error . $cmd, $args, $dir, $tty];
       $byUserSum{$user}{$euser}{$cmd} += 1;
    } elsif ( ($user,$euser) = $ThisLine =~ /^\s*(\S+) : no passwd entry for (\S+)\!$/) {
       push @{$byUser{$user}{$euser . " (No such user)"}}, ["No password entry"];
@@ -107,7 +109,7 @@
       } # foreach $gcmd
       foreach my $row (@{$byUser{$user}{$euser}}) {
          if ($Detail >= 10 || $CmdsThresh > $byUserSum{$user}{$euser}{$$row[0]}) {
-            my ($gcmd,$args, $dir, $tty) = @$row;
+            my ($gcmd, $args, $dir, $tty) = @$row;
             my $cmd = "$gcmd$args";
             # make long commands easier to read
             $cmd =~ s/(?=.{74,})(.{1,74}) /${1} \\\n    /g if (length($cmd) > 75);

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140