15.4. Logging in ZAS

Logging in ZAS can be configured in the Logging section of the Authentication server ZMC component. The parameters related to logging in ZAS are the following:

Configuring logging in ZAS

Figure 15.39. Configuring logging in ZAS

  • Log level: It is the verbosity level of the logs. Level 3 is the default value, and is usually sufficient. Log level 0 does not produce log messages, while log level 10 logs every small event, and shall only be used for debugging purposes.

  • Trust connection: This parameter permits password-based authentication methods even for unencrypted connections. The default value is: 0 (false).

    If this parameter is ON, the password is accepted even if the connection between Zorp and ZAS is not based on Transport Layer Security (TLS), otherwise it is not.

  • Thread limit: This value defines the number of threads ZAS can start. The graphical user interface now sets the ZAS default Thread limit to 100. It is possible though to set a different value for the Thread limit. Set this value according to the anticipated number of stacked connections. If the Thread limit is too low, the Zorp proxies stacking ZAS will experience delays and refused connection attempts. A suggested method to calculate this number, is to monitor the log for "Too many running threads, waiting for one to become free" line and to increase Zorp/ZAS/ZCV Thread limit parameter accordingly.

    Note, that if the Thread limit is already set with the ZAS "--threads=" option in the init script, then that option takes precedence. The value defined in the init script is cleared with each upgrade though, therefore this value can easily be updated at each upgrade to the preferred value, defined in the GUI.