no audit log anymore on cas6.6 after rebuilt

[Nodata Nodata]

Hello,

I am encountering a serious problem under cas 6.6..

 After a rebuild, and while cas.properties and log4j2.xml are exactly the same, there are no cas_audit.log and cas.log anymore. 

No new operations logged.

I ve read that there are some changes on org.apereo.inspektr.audit.support class on cas7 and I ve tried to replace in log4j2.xml:

        <Logger name="org.apereo.inspektr.audit.support" additivity="false" level="info">

by

        <Logger name="org.apereo.inspektr" additivity="false" level="info">

but same result ...

If someone can help me because concerned servers are in production use.

Regards.

Stephane

[Jeremiah Garmatter]

Stephane,

Sometimes my CAS instance loses audit logs during upgrades. I don't change the log4j2.xml file between upgrades but the new versions don't like my old configuration.

What has worked for me is to download a fresh copy of log4j2.xml for your version of CAS. I get mine from the CAS overlay. Then drop the fresh copy of log4j2.xml config in to your /etc/cas/config/ or wherever you keep log4j2.xml.

Hope this helps!

[AJ]

Make sure your line in log4j2.xml looks like this:

        <Logger name="org.apereo.inspektr" additivity="false" level="info">

            <AppenderRef ref="casConsole"/>

            <AppenderRef ref="casFile"/>

            <AppenderRef ref="casAudit"/>

        </Logger>

---

From: cas-...@apereo.org <cas-...@apereo.org> on behalf of Jeremiah Garmatter <j-gar...@onu.edu>
Sent: Monday, July 15, 2024 8:23 AM
To: CAS Community <cas-...@apereo.org>
Cc: Nodata Nodata <stph...@gmail.com>
Subject: [cas-user] Re: no audit log anymore on cas6.6 after rebuilt

 

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/37b31fef-db81-4d6a-aeda-d15de59c8334n%40apereo.org.

[Nodata Nodata]

Hello,

Thanks for your ideas. I ve applied all your advices but the problem was that I was trying to write outside off the tomcat directory and that the option ProtectSystem was positionned to Strict in the tomcat service definition in systemd.

It was not the case before... but I should have made an software update.

Thanks your reactivity and for all.

Regards,

Stephane