Misc WARN messages in IdP v3-alpha2 logs

[Kaspar Brand]

On 31.07.14 17:06, Cantor, Scott wrote:
> I'm interested in input on what people think should be left on INFO at
> all, let alone WARN, at this point. In particular, I'm not sure that
> anything except a very minimum amount of transactional detail should be on
> INFO. I'm thinking pretty much just a message about authentication
> attempts suceeding or failing.

Under the assumption that the default logback.xml config will have INFO
for net.shibboleth.idp, I agree. Currently, a successful LDAP authn
gives me

INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:182] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'student2' succeeded
INFO [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:181] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal student2
INFO [net.shibboleth.idp.session.impl.StorageBackedSessionManager:521] - Created new session 24c51e852caaeacba544469a2c4b368e7f8cfce61e6e7b91bcb428fcc72ea282 for principal student2
WARN [net.shibboleth.idp.authn.principal.impl.GenericPrincipalSerializer:113] - Unsupported Principal type will be omitted: org.ldaptive.jaas.LdapPrincipal
INFO [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:157] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party https://sp.example.org/shibboleth to existing session 24c51e852caaeacba544469a2c4b368e7f8cfce61e6e7b91bcb428fcc72ea282

but I would consider the first line sufficient overall (and session
information like the last line would go into the audit log).

Kaspar