Originally posted by: Tibor_B

Hi

We started using samba+kerberos for authentication against microsoft domains. So far it works but there are simply no logs created by kerberos. In config  /etc/krb5/krb5.conf we have this

[logging]

kdc = FILE:/var/krb5/log/krb5kdc.log

admin_server = FILE:/var/krb5/log/kadmin.log

kadmin_local = FILE:/var/krb5/log/kadmin_local.log

default = FILE:/var/krb5/log/krb5lib.log

But no logs are created in /var/krb5/log/. I would like to have more info what kerberos is doing.

Is this behavior normal?

Thanks

Originally posted by: AncientAIXer

I don't know if it is normal behavior, but some programs do not generate their own log files.  Sometimes you have to create them first before logging happens.

Originally posted by: Tibor_B

OK, I 'touched' them, I will check them later....

EDIT: No, the log files are still empty...

Originally posted by: derekb

[logging]
        kdc = FILE:/var/krb5/log/krb5kdc.log
        admin_server = FILE:/var/krb5/log/kadmin.log
        kadmin_local = FILE:/var/krb5/log/kadmin_local.log
        default = SYSLOG:debug:auth

Originally posted by: SandeepUmesh

You will have to enable the environment variables for the logging to be effective. The various variables that can be used is available in admin guide, you can refer to it.

For a quick reference, you will have to set the below -

export _KRB5_SVC_DBG_MSG_LOGGING=1

export _KRB5_SVC_DBG=*.9

export _KRB5_SVC_MSG_LEVEL=VERBOSE

Originally posted by: Tibor_B

Oh, thanks for answer. I noted it down and will try it when this will be actual again

Regards