Mgolfieri-decreasing saslauthd verbosity

Saslauthd might very verbose during daily activities within Zimbra:

"Nov 28 09:48:39 mta02 saslauthd[13929]: zmauth: authenticating against elected url 'https://archiver01.domain.com:7071/service/admin/soap/' ...
Nov 28 09:48:40 mta02 saslauthd[13929]: zmpost: url='https://archiver01.domain.com:7071/service/admin/soap/' returned buffer->data='<soap:Envelope xml
ns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><AuthResponse xmlns="urn:zimbraAccou
nt"> <authToken>0_aaf955a57dcf28943c50c52ba063689a1bcc5b21_69643d33363a64656663633666612d306466652d346264612d396538612d3931643661326161353865623b6578703d3
1333a313332323634323932303032353b76763d313a333b747970653d363a7a696d6272613b</authToken> <lifetime>172800000</lifetime><skin>carbon</skin></AuthResponse></
soap:Body></soap:Envelope>', hti->error="

We don't enable debug or verbose output options by default so what you are getting is the standard cyrus-sasl output. More specifically, that's the entry for the auth host being queried every time it's needed. Saslauthd uses the OS syslog facility to control the level of output and logs a lot of stuff by default to the AUTH facility with DEBUG and above priority level. zmsyslogsetup by default redirects all auth.* output to /var/log/zimbra.log. You can reduce this by adjusting syslog configuration to ignore the DEBUG level messages.

To change it we need to act on the syslog service installed on your OS. According to the distro, mileage might vary.

In my case, in /etc/rsyslog.d/60-zimbra.conf:

auth.*                  -/var/log/zimbra.log

becomes

auth.info                  -/var/log/zimbra.log

Then restart the rsyslog OS service at the end to apply changes.

Jump to: navigation, search