1. Forum
  2. Usenet
  3. COMP.PROTOCOLS.KERBEROS

  • Kerberos for Windows Logging

    From Greg Hudson@21:1/5 to Patrick Norman on Thu Jan 28 12:48:54 2021
    To: kerberos@mit.edu

    On 1/28/21 11:59 AM, Patrick Norman wrote:
    Hey all, I am looking into using Kerberos for Windows in a POC I am doing.
    I am having trouble getting logging to work

    The [logging] section is for krb5kdc and kadmind, which are not part of
    the Windows build.

    If you want to use trace logging, just set the KRB5_TRACE environment
    variable to a filename.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Patrick Norman@21:1/5 to All on Thu Jan 28 11:59:20 2021
    Hey all, I am looking into using Kerberos for Windows in a POC I am doing.
    I am having trouble getting logging to work, all other settings in my INI
    are working correctly. I have started procmon to check if something is
    going on with access and it appears nothing is even attempting to access
    the file path I have defined. There are a few examples I have found
    through searches, none of them seem to work. I have tried the following
    (folder exists), nothing seems to work, any help would be appreciated.

    [logging]
    default = FILE:C:\Temp\Logs\MITKerberos\krb5libs.log

    [logging]
    default = FILE:"C:\Temp\Logs\MITKerberos\krb5libs.log"

    [logging]
    default = C:\Temp\Logs\MITKerberos\krb5libs.log

    [logging]
    default = "C:\Temp\Logs\MITKerberos\krb5libs.log"

    [logging]
    default = 'C:\Temp\Logs\MITKerberos\krb5libs.log'

    Along with some variants of SYSLOG:INFO, though I cannot find a windows example.

    If someone could let me know if logging on Windows is supported it would be appreciated.
    Thank you,
    Patrick

    Patrick Norman
    Jane Street Group | Information Technology
    250 Vesey Street | New York, NY 10281

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Patrick Norman@21:1/5 to Greg Hudson on Thu Jan 28 13:46:59 2021
    Copy: kerberos@mit.edu

    Ahh, that explains it, thank you very much Greg! I was hoping to get
    warning / error level events (i.e. failure to renew a ticket / init). After seeing a few examples of it in win.ini config online I thought there was
    hope. Thanks again for allowing me to stop this wild goose chase!

    Patrick Norman
    Jane Street Group | Information Technology
    250 Vesey Street | New York, NY 10281


    On Thu, Jan 28, 2021 at 12:48 PM Greg Hudson <ghudson@mit.edu> wrote:

    On 1/28/21 11:59 AM, Patrick Norman wrote:
    Hey all, I am looking into using Kerberos for Windows in a POC I am
    doing.
    I am having trouble getting logging to work

    The [logging] section is for krb5kdc and kadmind, which are not part of
    the Windows build.

    If you want to use trace logging, just set the KRB5_TRACE environment variable to a filename.


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)