openafs/doc/man-pages/pod5/AuthLog.pod
Russ Allbery af1dbcf0c9 Add warnings for Authentication Server commands
For each command only useful with the Authentication Server, add
warnings that the Authentication Server is obsolete and will be
removed in a future version of OpenAFS.  Encourage people who care
to update uss to work with a modern Kerberos KDC, recommend kinit
and aklog or klog.krb5 over klog, and warn that klog will be of
limited use without an Authentication Server.

Change-Id: Idc78ba548134b83ac1eea0fb81a5bc38a431bb38
Reviewed-on: http://gerrit.openafs.org/2052
Reviewed-by: Derrick Brashear <shadow@dementia.org>
Tested-by: Derrick Brashear <shadow@dementia.org>
2010-05-31 20:40:58 -07:00

48 lines
1.7 KiB
Plaintext

=head1 NAME
AuthLog - Traces Authentication Server operations
=head1 DESCRIPTION
The F<AuthLog> file records a trace of Authentication Server (B<kaserver>
process) operations on the local machine and describes any error
conditions it encounters.
If the F<AuthLog> file does not exist in the F</usr/afs/logs> directory
when the Authentication Server starts, the server process creates it and
writes initial start-up messages to it. If there is an existing file, the
Authentication Server renames it to F<AuthLog.old>, overwriting the
existing F<AuthLog.old> file if it exists.
The file is in ASCII format. Administrators listed in the
F</usr/afs/etc/UserList> file can use the B<bos getlog> command to display
its contents. Alternatively, log onto the server machine and use a text
editor or a file display command such as the UNIX B<cat> command. By
default, the mode bits on the F<AuthLog> file grant the required C<r>
(read) permission to all users.
The Authentication Server records operations only as it completes them,
and cannot recover from failures by reviewing the file. The log contents
are useful for administrative evaluation of process failures and other
problems.
=head1 CAUTIONS
The Authentication Server is obsolete and is provided only for sites that
need to use it while preparing for a migration to Kerberos KDC. It will be
removed in a future version of OpenAFS.
=head1 SEE ALSO
L<UserList(5)>,
L<bos_getlog(8)>,
L<kaserver(8)>
=head1 COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was
converted from HTML to POD by software written by Chas Williams and Russ
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.