[logging]
The [logging] section indicates how krb5kdc(8) and kadmind(8) perform logging. The keys in this section are daemon names, which may be one of:
admin_server
Specifies how kadmind(8) performs logging.
kdc Specifies how krb5kdc(8) performs logging.
default
Specifies how either daemon performs logging in the absence of relations specific to the daemon.
Values are of the following forms:
FILE=filename or FILE:filename
This value causes the daemon's logging messages to go to the filename. If the = form is used, the file is overwritten. If the : form is used, the file is appended to.
STDERR This value causes the daemon's logging messages to go to its standard error stream.
CONSOLE
This value causes the daemon's logging messages to go to the console, if the system supports it.
DEVICE=<devicename>
This causes the daemon's logging messages to go to the specified device.
SYSLOG[:severity[:facility]]
This causes the daemon's logging messages to go to the system log.
The severity argument specifies the default severity of system log messages. This may be any of the following severities supported by the syslog(3) call, minus the LOG_ prefix: EMERG,
ALERT, CRIT, ERR, WARNING, NOTICE, INFO, and DEBUG.
The facility argument specifies the facility under which the messages are logged. This may be any of the following facilities supported by the syslog(3) call minus the LOG_ prefix:
KERN, USER, MAIL, DAEMON, AUTH, LPR, NEWS, UUCP, CRON, and LOCAL0 through LOCAL7.
If no severity is specified, the default is ERR. If no facility is specified, the default is AUTH.
In the following example, the logging messages from the KDC will go to the console and to the system log under the facility LOG_DAEMON with default severity of LOG_INFO; and the logging mes‐
sages from the administrative server will be appended to the file /var/adm/kadmin.log and sent to the device /dev/tty04.
[logging]
kdc = CONSOLE
kdc = SYSLOG:INFO:DAEMON
admin_server = FILE:/var/adm/kadmin.log
admin_server = DEVICE=/dev/tty04
|
