Removing/fixing shibboleth stats in Apache logs

Roland Tanner roland at tannerritchie.com
Tue Sep 18 11:52:16 EDT 2012


Hi Peter,

Could you give me an idea of the knock-on effect changing the 
REMOTE_USER might have? I'm reasonably sure it doesn't effect how our 
application works, but better make sure. Fixing awstats or tweaking 
Apache logs is probably the better way to go, you're right.

R

On 12-09-18 05:41 AM, Peter Schober wrote:
> * Brent Putman <putmanb at georgetown.edu> [2012-09-18 04:03]:
>> You can change the precedence list for what it treats as REMOTE_USER
>> on the ApplicationDefaults element in shibboleth2.xml:
> But changing what becomes REMOTE_USER has a lot more consequences than
> just the log output, so I find that a reather drastic measure.
>
> Same goes for another method, changing the way persistent NameIDs get
> serialized (e.g. by replacing ! with some other character to see
> whether that fixes awstats). You might also try to fix awstats itself.
>
> If you do always have an attribute you'd rather have logged but still
> want the NameID to be first in REMOTE_USER you could change your httpd
> logging config to include %{eppn}e or whatever you'd like in the
> log. http://httpd.apache.org/docs/2.2/logs.html (LogFormat, CustomLog),
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120918/647de837/attachment.html 


More information about the users mailing list