On Sat, 21 Feb 2015 14:53:21 +0000 Andrew Gallagher <andr...@andrewg.com> wrote:
> New versions of saslauthd say "pam_unix(smtp:auth)" instead of "(pam_unix)". > New rule is: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: > pam_unix\(smtp:auth\) authentication failure; logname= uid=0 euid=0 tty= > ruser= rhost=( [[:space:]]*user=[-._[:alnum:]]+)?$ Is this still the case in 2024? (This looks like possibly also the solution to bug 690145, which i will try and merge with this)