From 67087fc0f45618cfff1d95fb30e8da22ac62b923 Mon Sep 17 00:00:00 2001
From: Gregory Colpart <reg@evolix.fr>
Date: Mon, 3 Oct 2011 03:50:37 +0200
Subject: [PATCH] New exceptions

---
 debian/logcheck/evolix_courier   | 1 +
 debian/logcheck/evolix_saslauthd | 4 ++++
 2 files changed, 5 insertions(+)
 create mode 100644 debian/logcheck/evolix_courier
 create mode 100644 debian/logcheck/evolix_saslauthd

diff --git a/debian/logcheck/evolix_courier b/debian/logcheck/evolix_courier
new file mode 100644
index 0000000..aaa1ae0
--- /dev/null
+++ b/debian/logcheck/evolix_courier
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ authdaemond: pam_unix\(imap:auth\): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
diff --git a/debian/logcheck/evolix_saslauthd b/debian/logcheck/evolix_saslauthd
new file mode 100644
index 0000000..a19c8b4
--- /dev/null
+++ b/debian/logcheck/evolix_saslauthd
@@ -0,0 +1,4 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd\[[0-9]+\]: Authentication failed for [.-\/[:alnum:]-]+: Bind to ldap server failed \(invalid user/password or insufficient access\) \(-7\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd\[[0-9]+\]: do_auth         : auth failure: \[user=[.[:alnum:]-]+\] \[service=smtp\] \[realm=[.[:alnum:]-]*\] \[mech=(ldap|pam)\] \[reason=(Unknown|PAM auth error)\]$'
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd\[[0-9]+\]: pam_unix\(smtp:auth\): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ saslauthd\[[0-9]+\]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module$