Removing/fixing shibboleth stats in Apache logs
Roland Tanner
roland at tannerritchie.com
Tue Sep 18 11:52:16 EDT 2012
Hi Peter,
Could you give me an idea of the knock-on effect changing the
REMOTE_USER might have? I'm reasonably sure it doesn't effect how our
application works, but better make sure. Fixing awstats or tweaking
Apache logs is probably the better way to go, you're right.
R
On 12-09-18 05:41 AM, Peter Schober wrote:
> * Brent Putman <putmanb at georgetown.edu> [2012-09-18 04:03]:
>> You can change the precedence list for what it treats as REMOTE_USER
>> on the ApplicationDefaults element in shibboleth2.xml:
> But changing what becomes REMOTE_USER has a lot more consequences than
> just the log output, so I find that a reather drastic measure.
>
> Same goes for another method, changing the way persistent NameIDs get
> serialized (e.g. by replacing ! with some other character to see
> whether that fixes awstats). You might also try to fix awstats itself.
>
> If you do always have an attribute you'd rather have logged but still
> want the NameID to be first in REMOTE_USER you could change your httpd
> logging config to include %{eppn}e or whatever you'd like in the
> log. http://httpd.apache.org/docs/2.2/logs.html (LogFormat, CustomLog),
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120918/647de837/attachment.html
More information about the users
mailing list