Hi community.
Does KDC generate audit logs by any chance? If not, would there be any plan
to do so?
Thanks,
Yegui
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
On 6/20/19 1:16 PM, Yegui Cai wrote:
> Does KDC generate audit logs by any chance? If not, would there be any plan
> to do so?
The KDC currently generates log messages like this (for a successful
AS-REQ):
Jun 06 11:26:50 small-gods krb5kdc[14165](info): AS_REQ (8 etypes
{aes256-cts-hmac-sha1-96(1
In my opinion, audit logging can be a subset of the loggings KDC has. But
sometimes, software can have audit loggings separately.
On Thu, Jun 20, 2019 at 1:40 PM Greg Hudson wrote:
> On 6/20/19 1:16 PM, Yegui Cai wrote:
> > Does KDC generate audit logs by any chance? If not, would there be any
>