Date:  Sat, 04 Aug 2007 17:54:42 -0400
From:  MuntadaNet Webmaster <webmaster (at mark) muntada.com>
Subject:  [coba-e:10534] PAM Issues
To:  coba-e (at mark) bluequartz.org
Message-Id:  <200708042202.l74M28tN007581 (at mark) huda.muntadanet.com>
X-Mail-Count: 10534

I ran into a problem with one of my servers.  Regular users were 
unable to login via ssh, web admin, etc.  I realized that the issue 
was similar to our dovecot issue and ran dbrecover start.  The 
problem was fixed immediately.

Therefore, I have a script which is a mod to the script contributed 
by another individual (please take your credit as I am too lazy to 
search).  I added this .pl to the cron.quarter-hourly folder.

$mailprog = '/usr/sbin/sendmail';
$sendto = "admin\ (at mark) machinename.com";
$problem = "no";
$badipcount = 0;
$serverdomain = "domainname.com";



$count =`tail -300  /var/log/secure | grep "Failed password for <put 
a regular user account here that uses the system frequently or keep 
this part out>" -c`;


if ($count > 5)
{
         $goodlogincount  =`tail -200  /var/log/secure | grep 
"Accepted password for <put a regular user account here that uses the 
system frequently or keep this part out>" -c `;
         if ( $goodlogincount < 1)
         {
                 print "No good logins\n";
                 system  (" /etc/rc.d/init.d/dbrecover start");
                 $problem = "yes";


                 open (MAIL, "|$mailprog -t") || &safe_die("Can't 
open $mailprog!\n");
                 print MAIL "From: $sendto\n";
                 print MAIL "Reply-To: $sendto\n";
                 print MAIL "To: $sendto\n";
                 print MAIL "Subject:  I ran the dbrecover on $serverdomain
                 \n\n";
                 print MAIL " I ran the dbrecover on $serverdomain \n";


                 $logentries  =`tail -200  /var/log/secure | grep 
"for <put a regular user account here that uses the system frequently 
or keep this part out>" `;
                 print MAIL "The log entries are \n\n $logentries \n";
                 close (MAIL);
         }
}

*****************************************************************
MuntadaNet Web Hosting and Web Design Services
http://www.muntada.com

Sales - sales (at mark) muntada.com
Support - support (at mark) muntada.com
Billing - billing (at mark) muntada.com

Main Office - 808-689-6092
Fax - (808) 356-0279
*****************************************************************


*****************************************************************
MuntadaNet Web Hosting and Web Design Services
http://www.muntada.com

Sales - sales (at mark) muntada.com
Support - support (at mark) muntada.com
Billing - billing (at mark) muntada.com

Main Office - 808-689-6092
Fax - (808) 356-0279
*****************************************************************
	
10534_2.html (attatchment)(tag is disabled)