GSSAPI Syslog Input Module

Module Name: imtcp

Author: varmojfekoj <email address here? which?>

Description:

Provides the ability to receive syslog messages from the network protected via Kerberos 5 encryption and authentication. This module also contains the functionality found in imtcp, which can not be used if imgssapi is used.

Configuration Directives:

InputGSSServerRun <port>
Starts a GSSAPI server on selected port - note that this runs independently from the TCP server.
InputGSSServerServiceName <name>
The service name to use for the GSS server.
$InputTCPServerRun <port>
Starts a TCP server on selected port
$InputTCPMaxSessions <number>
Sets the maximum number of sessions supported

Caveats/Known Bugs:

module always binds to all interfaces
only a single listener can be bound (one each for GSS and plain TCP)
duplicates imtcp functionality and thus conflicts with it. This will change in the future. Unfortunately, that also means that your config files probably need to be changed in the future when that change happens.

Sample:

This sets up a TCP server on port 514 and a GSSAPI protected syslog server at port 1514:

[rsyslog.conf overview] [manual index] [rsyslog site]