Question:
How does one reduce the logging of INFO AUDIT_TRAIL messages as shown in the below snippet?
Jan 22 14:53:48 br3-sdv-stc adclient[31876]: INFO AUDIT_TRAIL|Centrify Suite|PAM|1.0|600|PAM close session granted|5|user=ebhuiyan(type:ad,ebhuiyan@ezdomain.com) pid=11214 utc=1390420428846 status=GRANTED service=su-l
[root@br3-sdv-stc ~]# grep log: /etc/centrifydc/centrifydc.conf
log: WARN
# adclient.clients.listen.backlog: 50
Answer:
Check whether the following parameter is present in "/etc/centrifydc/centrifydc.conf" file:
"log.client.audittrail"
Note: log.client.audittrail has been hidden in centrifydc.conf with the latest build 5.1.2-372.
1.Set the parameter manually with
log.client.audittrail: WARN in centrifydc.conf, then run adreload.
This will reduce the messages.