Add support for new(?) Authentication error messages from PAM.

2024-03-24 13:35:48 +01:00
parent b672e4274d
commit 68ab6d0437
1 changed files with 8 additions and 0 deletions
--- a/lib/ssh_parser.pm
+++ b/lib/ssh_parser.pm
@ -169,6 +169,14 @@ sub parser {
 			m/ ($re_host) /gcix && do {
 				$host	= $1;
 			};
+	} elsif($string =~ m/Authentication error for( illegal user|) $re_user from $re_host/) {
+		$_		= $string;
+		$hostile	= 1;
+		$reply		= 'Authentication error';
+		PARSER:
+			m/from\ ($re_host)$/gcix && do {
+				$host	= $1;
+			};
 	} else {
 		$reply	= 'No match for '.$string;
 	}