GSSAPI Syslog Input Module

Module Name:    imgssapi

Author: varmojfekoj

Description:

Provides the ability to receive syslog messages from the network protected via Kerberos 5 encryption and authentication. This module also accept plain tcp syslog messages on the same port if configured to do so. If you need just plain tcp, use imtcp instead.

There is also an overview of gssapi support in rsyslog available. We recommend reading it before digging into the configuration parameters.

Configuration Directives:

• InputGSSServerRun <port>
  Starts a GSSAPI server on selected port - note that this runs independently from the TCP server.
• InputGSSServerServiceName <name>
  The service name to use for the GSS server.
• $InputGSSServerPermitPlainTCP on|off
  Permits the server to receive plain tcp syslog (without GSS) on the same port
• $InputGSSServerMaxSessions <number>
  Sets the maximum number of sessions supported

• module always binds to all interfaces
• only a single listener can be bound

Sample:

This sets up a GSS server on port 1514 that also permits to receive plain tcp syslog messages (on the same port):

[rsyslog.conf overview] [manual index] [rsyslog site]

This documentation is part of the rsyslog project.
Copyright © 2008-2011 by Rainer Gerhards and Adiscon. Released under the GNU GPL version 3 or higher.