ShibSP & remote syslog

[Peter Schober]

* Alex Mihičinac <alexm at arnes.si> [2012-10-29 10:07]:
> On 26. okt. 2012, at 14:45, Peter Schober <peter.schober at univie.ac.at> wrote:
> > * Alex Mihičinac <alexm at arnes.si> [2012-10-25 22:43]:
> >> could someone point me to documentation about how to redirect
> >> Shibboleth Service Provider logger to (remote) syslog. 
> > 
> > So far I've only used the LocalSyslogAppender and forwarded relevant
> > things from there to a cental syslog-(ng) host,
> 
> Would you be so kind and expose that part of your config? :-)

E.g. like this:

# [r]syslog.conf
local1.none;local2.none;local3.none    /var/log/messages
local1.*                               /var/log/native
local2.*                               /var/log/shibd
local3.*                               /var/log/trans

# native.logger
log4j.appender.native_log=org.apache.log4j.LocalSyslogAppender
log4j.appender.native_log.syslogName=native
log4j.appender.native_log.facility=17
log4j.appender.native_log.layout=org.apache.log4j.BasicLayout

# shibd.logger
log4j.appender.shibd_log=org.apache.log4j.LocalSyslogAppender
log4j.appender.shibd_log.syslogName=shibd
log4j.appender.shibd_log.facility=18
log4j.appender.shibd_log.layout=org.apache.log4j.BasicLayout

log4j.appender.tran_log=org.apache.log4j.LocalSyslogAppender
log4j.appender.tran_log.syslogName=trans
log4j.appender.tran_log.facility=19
log4j.appender.tran_log.layout=org.apache.log4j.BasicLayout

The only flaw with this seems to be that the syslogName is being
shared between the last two appenders, always being "trans" in this
example. But since they can be split and redirected to seperate files
(if desired) this is purely aesthetic.
-peter