[OpenAFS-devel] new auditlog options

Jeffrey Altman jaltman@secure-endpoints.com
Sat, 25 Jul 2009 10:26:14 -0400


Jason Edgecombe wrote:
> Hi,
> 
> In light of the new -auditlog option, what information is saved in the
> auditlog? When is it useful to use? How does it differ from increasing
> the log level with kill -TSTP?
> 
> Thanks,
> Jason

Jason:

The -auditlog option has been present since 1.4.0.   What is new is an
ability to select where the -auditlog data is written.

The audit log as one might expect records one entry for every RPC that
is received by the service and indicates what host the RPC was received
from, who the authenticated entity is, what the RPC is, the parameters
for that RPC, and whether it succeeded or failed.

Jeffrey Altman