"Message repeated" entries in auth.log show wrong username in logwatch

[Bill Miller]

When my system mounts a bunch of drives at once over cifs (as it does every time I boot it) a message is generated in auth.log like this:

Oct 1 07:51:49 myservername smbd: message repeated 2 times: [ pam_unix(samba:session): session opened for user myusername by (uid=0)]

When logwatch picks this up, it appends the close-square-bracket from the message to the user name, so the email I get from logwatch has this in it:

myusername]: 2 Time(s)

instead of including these entries under the un-appended version of my user name.

So basically I get two entries every day, one for myusername, and one for myusername].

Big deal? No. But it's annoying, and should be a trivial fix.

[Bryce Harrington (bryce)]

This sounds familiar, I think a fix for it may have come through recently. Is this still reproducible on eoan or focal?

More explicit steps to reproduce this (so we can do it in an lxc container) would help a lot.

[Bill Miller (wbmilleriii)]

I was on 16.04 back in 2017 when I wrote this. I don't see this on my 18.04 systems now. I'm OK with closing this, is that something I can do?

[Paride Legovini (paride)]

Hi Bill, the bug status can be set to "Fix Released", meaning that the bug has been fixed in a version of the package available in a Ubuntu release. This seems to be the case here, as you can't reproduce the issue in Bionic. If this sounds right to you, please go ahead and change the bug status. Thanks!

[Bill Miller (wbmilleriii)]

Done, thanks.