logging.xml enabling

[Gilles Badouet]

>Note that syntax for the filesystem path to your login.config looks
>different than the example in
>http://docs.oracle.com/javase/1.5.0/docs/guide/security/jaas/tutorials/LoginConfigFile.html
>Maybe someone using the IdP on a MS-Windows system can chime in here.

Thanks Peter, 

I am now able to see the ldap related logs. As you stated above, my filesystem path in login.config was wrong because it had to be forward slashes. Apparently regardless of the OS it should always be  forward slashes in that file.



Kind regards





Gilles Rubens Badouet

Student ID: 3940347

Faculty of Engineering and Computing

MSc Network Computing Course

Mobile: 07424486426

________________________________________
From: users-bounces at shibboleth.net <users-bounces at shibboleth.net> on behalf of users-request at shibboleth.net <users-request at shibboleth.net>
Sent: 05 July 2013 17:00
To: users at shibboleth.net
Subject: users Digest, Vol 25, Issue 31

Send users mailing list submissions to
        users at shibboleth.net

To subscribe or unsubscribe via the World Wide Web, visit
        http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
        users-request at shibboleth.net

You can reach the person managing the list at
        users-owner at shibboleth.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of users digest..."


Today's Topics:

   1. Re: disclosure of IP address in cookie (David Langenberg)
   2. Re: logging.xml enabling (Peter Schober)


----------------------------------------------------------------------

Message: 1
Date: Fri, 5 Jul 2013 09:55:50 -0600
From: David Langenberg <davel at uchicago.edu>
Subject: Re: disclosure of IP address in cookie
To: Shib Users <users at shibboleth.net>
Message-ID:
        <CACrmAWMYpKjCVTD=7wgTwgRVJ9ppkbiL80ZJkhZzE-z9waGEbQ at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Not commenting on the value of having that cookie set or not as I don't
maintain that plugin.  Just stating that the likely source of him having
his IdP set that cookie is coming from the use of that plug-in.

Dave


On Fri, Jul 5, 2013 at 9:51 AM, Peter Schober <peter.schober at univie.ac.at>wrote:

> * David Langenberg <davel at uchicago.edu> [2013-07-05 17:47]:
> > Are you perhaps using the Memcache IdP storage plugin?  That plugin
> > sets the _idp_authn_lc_key cookie.
>
> That's mostly irrelevant since the IdP's default session cookie also
> contains that same information.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



--
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130705/c0b434b9/attachment-0001.html

------------------------------

Message: 2
Date: Fri, 5 Jul 2013 17:58:42 +0200
From: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: logging.xml enabling
To: users at shibboleth.net
Message-ID: <20130705155842.GZ16407 at aco.net>
Content-Type: text/plain; charset=us-ascii

* Gilles Badouet <badouetg at uni.coventry.ac.uk> [2013-07-05 17:32]:
> Below is my UsernamePassword  conf in handler.xml
>
>  <!--  Username/password login handler -->
>
>     <ph:LoginHandler xsi:type="ph:UsernamePassword"
>                   jaasConfigurationLocation="file://C:\IDP\conf\login.config">
>         <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
>     </ph:LoginHandler>

And no other login handler is active (with the exception of
PreviousSession)?

Note that syntax for the filesystem path to your login.config looks
different than the example in
http://docs.oracle.com/javase/1.5.0/docs/guide/security/jaas/tutorials/LoginConfigFile.html
Maybe someone using the IdP on a MS-Windows system can chime in here.

(Again whether login.conf is being read at all would be easy to tes by
breaking the config and trying to restart the servlet container.)

Slowly running out of ideas.
-peter


------------------------------

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

End of users Digest, Vol 25, Issue 31
*************************************