GssMode

Chooses whether omgssapi requests integrity-only or encrypted message protection for GSSAPI sessions.

This parameter applies to omgssapi: GSSAPI Syslog Output Module.

Name:

GssMode

Scope:

module

Type:

string

Default:

encryption

Required?:

no

Introduced:

1.21.2

Description

Specifies the GSS-API protection level used by the client. The available modes are:

  • integrity — only authenticates clients and verifies message integrity.

  • encryption — provides the same guarantees as integrity and encrypts messages when both peers support it.

Legacy configurations set this directive with statements such as $GssMode encryption.

Module usage

This module supports legacy directives and selector actions. Load it before setting the directive, then configure the forwarding action.

module(load="omgssapi")
$GssMode encryption
*.* :omgssapi:receiver.mydomain.com

Legacy names (for reference)

The following directive is the supported configuration interface for omgssapi.

  • $GssMode — sets GssMode for subsequent forwarding actions.

See also

See also omgssapi: GSSAPI Syslog Output Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.