##########################################################################
# $Id: saslauthd,v 1.2 2005/02/24 17:08:05 kirk Exp $
##########################################################################
# $Log: saslauthd,v $
# Revision 1.2  2005/02/24 17:08:05  kirk
# Applying consolidated patches from Mike Tremaine
#
# Revision 1.2  2005/02/16 00:43:28  mgt
# Added #vi tag to everything, updated ignore.conf with comments, added emerge and netopia to the tree from Laurent -mgt
#
# Revision 1.1  2005/02/13 23:50:42  mgt
# Tons of patches from Pawel and PLD Linux folks...Thanks! -mgt
#
# Revision 1.2  2004/10/02 14:21:47  blues
# - fix
#
# Revision 1.1  2004/10/02 14:16:50  blues
# - initial version of saslauthd filter.
#
#
##########################################################################

########################################################
# This was written by:
# Paweł Gołaszewski <blues@ds.pg.gda.pl>
#
# Please send all comments, suggestions, bug reports,
# logwatch-devel@logwatch.org
#
########################################################

my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
my $Debug = $ENV{'LOGWATCH_DEBUG'} || 0;

$AuthFailures = 0;
$Startups = 0;
$Shutdowns = 0;

while (defined($ThisLine = <STDIN>)) {
   if ( 
      ( $ThisLine =~ m/^DEBUG: / ) or
      ( $ThisLine =~ m/^ipc_init        : listening on socket:/ )
   ) {
      # We don't care about these
   } elsif ( ($User,$Service,$Realm,$Mechanism,$Reason) = ($ThisLine =~ /^do_auth         : auth failure: \[user=(.*)\] \[service=([^ ]*)\] \[realm=([^ ]*)\] \[mech=([^ ]*)\] \[reason=(.*)\]$/) ) {
      $AuthFailures++;
      $AuthFailServiceCount{"$Service ($Mechanism)"}++;
      $AuthFailRealmCount{"$Service ($Mechanism)"}{$Realm}++;
      $AuthFail{"$Service ($Mechanism)"}{$Realm}{"$User - $Reason"}++;
   } elsif ( $ThisLine =~ m/^detach_tty      : master pid is: \d+$/) {
      $Startups++;
   } elsif ( $ThisLine =~ m/^server_exit     : master exited: \d+$/) {
      $Shutdowns++;
   } else {
      push @OtherList,$ThisLine;
   }
}

##################################################################

if ($Startups > 0) {
   print "Startups: $Startups\n";
}

if ($Shutdowns > 0) {
   print "Shutdowns: $Shutdowns\n";
}

if (keys %AuthFail) {
   print "\nSASL Authentications failed $AuthFailures Time(s)\n";
   foreach $Service (sort {$a cmp $b} keys %AuthFail) {
      print "Service $Service - $AuthFailServiceCount{$Service} Time(s):\n";
      foreach $Realm (sort {$a cmp $b} keys %{$AuthFail{$Service}} ) {
         print "   Realm $Realm - $AuthFailRealmCount{$Service}{$Realm} Time(s):\n";
         foreach $User (sort {$a cmp $b} keys %{$AuthFail{$Service}{$Realm}} ) {
            print "      User: $User - $AuthFail{$Service}{$Realm}{$User} Time(s):\n";
         }
      }
   }
}

if ($#OtherList >= 0) {
   print "\n\n**Unmatched Entries**\n\n";
   print @OtherList;
}


exit(0);

# vi: shiftwidth=3 tabstop=3 syntax=perl et