[19934] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Disable logging for krb5kdc

daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu May 16 14:48:42 2019

To: =?UTF-8?B?0JTQuNC70Y/QvSDQn9Cw0LvQsNGD0LfQvtCy?=
	<Dilyan.Palauzov@aegee.org>,
        <krbdev@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <0b42ca71-71d9-6962-1dfe-53e978a0bdbc@mit.edu>
Date: Thu, 16 May 2019 14:47:53 -0400
MIME-Version: 1.0
In-Reply-To: <5E9549AB-23B0-4A83-B2C4-6345432126B1@aegee.org>
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Errors-To: krbdev-bounces@mit.edu
Content-Transfer-Encoding: 8bit

On 5/15/19 6:26 PM, Дилян Палаузов wrote:
> I thought that no default/kdc entry in the [logging] section of kdc.conf and krb5.conf will mean no logging.  Yet, krb5kdc writes to syslog or stdout (which goes to systemd/journal, where I can see it).

From the code, I believe the default is to write to syslog.  I don't see
any code to default to logging to stdout or stderr.

> Please amend the documemtation for kdc.conf to state:
> - what are the default logging settings if default is not specified, and
> - how to disable logging for krb5kdc.
> 
> I think right now for the latter using /dev/null as DEVICE or in the systemd service file use LogLevelMax=alert.  But maybe there is a better way.

I will update the documentation.  I don't see a way to disable logging
aside from writing to /dev/null.
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev


home help back first fref pref prev next nref lref last post