<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 06/03/2013 02:23 PM, Aly Khimji wrote:
<blockquote
cite="mid:CAJMZt_bSgVdZn0knVFCbrA8Ugnyd8FBFpg+7cFaOE444KeAqqA@mail.gmail.com"
type="cite">
<div dir="ltr">Quick questions guys,
<div><br>
</div>
<div style="">can you advise if there is a particular place(s)
successful and failed users authentication is logged? I know
from local users I can go through the 389 access logs, but for
trust based users can you advise where I would look? I know i
see a proper ticket issued in krb5kdc logs, but mainly for
failed logins.</div>
</div>
</blockquote>
<br>
What is the scenario?<br>
Is this: user from AD logs into a Linux system that is joined into
IPA via SSSD?<br>
In this case the authentication happens in AD so the audit trail
will be there.<br>
Once this user tries to access a resource in IPA domain there will
be a record of issuing this user a service ticket in the kerberos log.<br>
<br>
The users always get TGTs from the domain they belong to so the
record will be in the log of the corresponding KDC.<br>
<br>
<br>
<blockquote
cite="mid:CAJMZt_bSgVdZn0knVFCbrA8Ugnyd8FBFpg+7cFaOE444KeAqqA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div style=""><br>
</div>
<div style="">Thx </div>
<div style=""><br>
</div>
<div style="">Aly</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>