Removing/fixing shibboleth stats in Apache logs

[Christopher Bongaarts]

On 9/18/2012 10:52 AM, Roland Tanner wrote:
> Hi Peter,
>
> Could you give me an idea of the knock-on effect changing the
> REMOTE_USER might have? I'm reasonably sure it doesn't effect how our
> application works, but better make sure. Fixing awstats or tweaking
> Apache logs is probably the better way to go, you're right.

If you are using the Apache "Require user" directive, or if your 
application consumes the REMOTE_USER CGI (server) variable, changing 
what is put in REMOTE_USER will affect those functions.

I would approach the issue like this:

1. Set up REMOTE_USER so it has the "right" contents for your app, if needed
2. Set up Apache logging to log either REMOTE_USER (if its value is what 
you want logged), or some other attribute.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%