ACZoom  ·  Archive-2016

Hi,
I'm running RHEL4 and am auth via PAM to ldap. The following error occurs but Blockhosts is not picking it up:
Aug 7 13:04:15 www-usr sshd(pam_unix)[26124]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.99.3.99 user=jdoe

using existing posts i've come up with this, but it still doesn't work:
"SSHD-PamFailv2": re.compile(r"""sshd\[\d+\]: \(pam_unix\) authentication failure; logname= uid=[0-9]+ euidi=[0-9]+ tty=ssh ruser= rhosts=(::ffff:)?(?P\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|.*)"""),

can anybody help me out and write a new one? thanx.