Removing/fixing shibboleth stats in Apache logs

Peter Schober peter.schober at univie.ac.at
Tue Sep 18 05:41:51 EDT 2012


* Brent Putman <putmanb at georgetown.edu> [2012-09-18 04:03]:
> You can change the precedence list for what it treats as REMOTE_USER
> on the ApplicationDefaults element in shibboleth2.xml:

But changing what becomes REMOTE_USER has a lot more consequences than
just the log output, so I find that a reather drastic measure.

Same goes for another method, changing the way persistent NameIDs get
serialized (e.g. by replacing ! with some other character to see
whether that fixes awstats). You might also try to fix awstats itself.

If you do always have an attribute you'd rather have logged but still
want the NameID to be first in REMOTE_USER you could change your httpd
logging config to include %{eppn}e or whatever you'd like in the
log. http://httpd.apache.org/docs/2.2/logs.html (LogFormat, CustomLog),
-peter


More information about the users mailing list