Dear All, In the past, I had issues with debug logging in Krb5LoginModule: if debug is enabled, messages are simply written to the stdout. It is relatively hard to correlate these messages with application logs, as there are no timestamps for Krb5LoginModule output messages.
Imagine a server fails to service a request, due to its failure to communicate with another Kerberized server. The failure itself will be logged properly, but there is no way for an operator to easily find and correlate Krb5LoginModule debug output. (We are talking about servers unders heavy load) I think debug logging in Krb5LoginModule should be improved; e.g. at least, messages should be sent to both stdout and a JUL logger maybe? I would be happy to implement the code change if someone is willing to sponsor this issue. Could someone please help here? Thanks, Peter
