[KARAF-4414] Add LogAuditLoginModule and replace FileAuditLoginModule by default

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.0, 4.0.5
• Component/s: karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: Jean-Baptiste Onofré
• Created: 11/Mar/16 14:28
• Updated: 15/Sep/18 05:45
• Resolved: 29/Mar/16 21:45

Description

Currently, Karaf enabled the FileAuditLoginModule by default. This login module audit all security actions (logon, logout, etc) performed by users.

However, this is a simple file (populated by a StringWriter), so it always grows up, never rotate and we can't limit the size.

I've implemented a new LogAuditLoginModule that use slf4j to log the security actions.
We should use this login module by default (instead of the FileAuditLoginModule, using a specific appender in etc/org.ops4j.pax.logging.cfg).