Re: logging stanza in krb5.conf?

From	Lawrence D'Oliveiro <ldo@nz.invalid>
Newsgroups	comp.protocols.kerberos
Subject	Re: logging stanza in krb5.conf?
Date	2025-05-28 04:43 +0000
Organization	A noiseless patient Spider
Message-ID	<101648q$33425$1@dont-email.me> (permalink)
References	<C7C12A04-5FB8-4619-AF28-A73E731733C5@prime.gushi.org> <mailman.176.1744861277.2322.kerberos@mit.edu>

Show all headers | View raw

On Wed, 16 Apr 2025 20:40:45 -0700, Dan Mahoney wrote:

> Maybe this is a docbug, but we had the following stanza in our
> krb5.conf, on our KDC's running MIT krb5 1.21.3 (FreeBSD pkg).
> 
> [logging]
>         kdc = FILE:/var/log/krb5kdc
>         admin_server = FILE:/var/log/kadmin
>         default = FILE:/var/log/krb5
> 
> And I recently discovered that the krb5kdc process wasn't
> reading/honoring those files, unless the statements were in kdc.conf.

I’m new to Kerberos, but all the docs I’ve seen so far say it should go in 
krb5.conf, which I found surprising, since I thought all server-specific 
settings should go in kdc.conf.

Glad to know the documentation is wrong, and the software is correct. ;)

Back to comp.protocols.kerberos | Previous | Next — Previous in thread | Find similar

Thread

logging stanza in krb5.conf? Dan Mahoney <danm@prime.gushi.org> - 2025-04-16 20:40 -0700
  Re: logging stanza in krb5.conf? Lawrence D'Oliveiro <ldo@nz.invalid> - 2025-05-28 04:43 +0000

csiph-web