Audit logging

2019-06-20 Thread Yegui Cai
Hi community. Does KDC generate audit logs by any chance? If not, would there be any plan to do so? Thanks, Yegui Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Audit logging

2019-06-20 Thread Greg Hudson
On 6/20/19 1:16 PM, Yegui Cai wrote: > Does KDC generate audit logs by any chance? If not, would there be any plan > to do so? The KDC currently generates log messages like this (for a successful AS-REQ): Jun 06 11:26:50 small-gods krb5kdc[14165](info): AS_REQ (8 etypes {aes256-cts-hmac-sha1-96(1

Re: Audit logging

2019-06-20 Thread Yegui Cai
In my opinion, audit logging can be a subset of the loggings KDC has. But sometimes, software can have audit loggings separately. On Thu, Jun 20, 2019 at 1:40 PM Greg Hudson wrote: > On 6/20/19 1:16 PM, Yegui Cai wrote: > > Does KDC generate audit logs by any chance? If not, would there be any >