Gerald Turner
2011-Aug-15 19:19 UTC
[Logcheck-devel] Bug#637923: Tweak to ssh rules to ignore AllowGroups denial
Subject: logcheck-database: Tweak to ssh rules to ignore AllowGroups denial Package: logcheck-database Version: 1.3.13 Severity: minor *** Please type your report below this line *** Similar to how AllowUsers denials are ignored, also ignore AllowGroups: ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: User [-_.[:alnum:]]+ from [-_.[:alnum:]]+ not allowed because none of user's groups are listed in AllowGroups$ -- System Information: Debian Release: 6.0.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash -- Configuration Files: -- no debconf information -- Gerald Turner Email: gturner at unzane.com JID: gturner at unzane.com GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5 -------------- next part -------------- A non-text attachment was scrubbed... Name: ssh-allowgroups.patch Type: text/x-diff Size: 1147 bytes Desc: not available URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110815/623f3b2f/attachment.patch> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110815/623f3b2f/attachment.pgp>
# fixed in 7f8efa8d tags 637923 +pending thanks -- Jeremy L. Gaddis
Debian Bug Tracking System
2011-Aug-17 02:58 UTC
[Logcheck-devel] Processed: tagging 637923
Processing commands for control at bugs.debian.org:> # fixed in 7f8efa8d > tags 637923 +pendingBug #637923 [logcheck-database] Tweak to ssh rules to ignore AllowGroups denial Added tag(s) pending.> thanksStopping processing here. Please contact me if you need assistance. -- 637923: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637923 Debian Bug Tracking System Contact owner at bugs.debian.org with problems
Debian Bug Tracking System
2011-Sep-08 14:51 UTC
[Logcheck-devel] Bug#637923: marked as done (Tweak to ssh rules to ignore AllowGroups denial)
Your message dated Thu, 08 Sep 2011 14:48:50 +0000 with message-id <E1R1fuM-0008SA-8i at franck.debian.org> and subject line Bug#637923: fixed in logcheck 1.3.14 has caused the Debian Bug report #637923, regarding Tweak to ssh rules to ignore AllowGroups denial to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 637923: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637923 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Gerald Turner <gturner at unzane.com> Subject: Tweak to ssh rules to ignore AllowGroups denial Date: Mon, 15 Aug 2011 12:19:25 -0700 Size: 5035 URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110908/99d5c632/attachment.mht> -------------- next part -------------- An embedded message was scrubbed... From: Hannes von Haugwitz <hannes at vonhaugwitz.com> Subject: Bug#637923: fixed in logcheck 1.3.14 Date: Thu, 08 Sep 2011 14:48:50 +0000 Size: 10036 URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110908/99d5c632/attachment-0001.mht>
Apparently Analagous Threads
- VisualHostKey vs. RekeyLimit vs. VerifyHostKeyDNS
- [Bug 2194] New: Supress VisualHostKey message when re-keying
- ((AllowUsers || AllowGroups) && !(AllowUsers && AllowGroups))
- [Bug 2391] New: Enhance AllowGroups documentation in man page
- Question about AllowUsers and AllowGroups