[JIRA] Commented: (SSPCPP-523) Strange behaviour of native log

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14555#comment-14555 ] 

Scott Cantor commented on SSPCPP-523:
-------------------------------------

If you add a logger property, then it can no longer maintain control as root and you will have to go back to setting up special permissions for the file and directory as before. Log rotation certainly won't work since the directory is owned by root and it can't create new files as apache.

I don't know why people are seeing problems without it, it worked fine for me, I will have to test again.

The warning wouldn't show up unless exportAssertion were set so they're mistaken about that.

> Strange behaviour of native log 
> --------------------------------
>
>                 Key: SSPCPP-523
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-523
>             Project: Shibboleth SP - C++
>          Issue Type: Bug
>            Reporter: Lukas Haemmerle
>            Assignee: Scott Cantor
>            Priority: Minor
>
> One of our universities observed some strange behaviour of the native.log. With RedHat 5 they only hardly get any entries besides the ones below when starting the SP:
> 	2012-11-04 20:27:12 INFO XMLTooling.Config : xmltooling 1.5.1 library initialization complete
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : shibboleth 2.5.0 library initialization complete
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : shibboleth 2.5.0 library shutting down
> 	2012-11-04 20:27:12 INFO XMLTooling.Config : xmltooling 1.5.1 library shutdown complete
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : shibboleth 2.5.0 library shutdown complete
> 	2012-11-04 20:27:12 INFO XMLTooling.Config : xmltooling 1.5.1 library initialization complete
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : shibboleth 2.5.0 library initialization complete
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : reload thread started...running when signaled
> 	2012-11-04 20:27:12 INFO Shibboleth.Config : reload thread started...running when signaled
> However, there should be more entries than this (in my centos 5 installation about 191 INFO entries)
> So, they added <InProcess logger="native.logger"/> to shibboleth2.xml, which by default is not included.
> This then results in the following CRIT entries:
> 	2012-11-04 20:55:04 CRIT XMLTooling.Logging : error in file permissions or logging configuration: exception creating appender: failed to open log file (/var/log/httpd/native.log)
> 	2012-11-04 20:55:04 CRIT Shibboleth.Config : failed to load new logging configuration from (native.logger)
> However, the file /var/log/httpd/native.log exists with root:root 644. It also does not play a difference if the native.log is written to /tmp/. Same result. Also, in this case the log rotation does not work and the log file grows larger and larger. After a while one will find exclusively entries like these:
> 	2012-11-07 13:46:17 INFO Shibboleth.Config : loaded XML resource (/etc/shibboleth/shibboleth2.xml)
> 	2012-11-07 13:46:45 INFO Shibboleth.Config : reload thread started...running when signaled
> Something else they observed are many entries like:
> 2012-11-06 04:25:46 WARN Shibboleth.ServiceProvider [27347] shib_check_user: can't export assertions without an exportLocation Sessions property
> Is it justified to make these WARN entries if exportAssertion is not used at all?

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira