IdP logging failed logins

[Martin Lunze]

Hi all,

first here are the important lines of my logging.xml

<logger name="edu.internet2.middleware.shibboleth" level="WARN"/>
<logger name="org.opensaml" level="WARN"/>
<logger name="edu.vt.middleware.ldap" level="WARN"/>
<logger
name="edu.internet2.middleware.shibboleth.idp.profile.StatusProfileHandler" level="ERROR"/>
<logger name="ch.SWITCH.aai.uApprove" level="WARN"/>

Shibboleth works fine, but there is one point which i can't figure out.
All successful logins are logged at the idp-audit.log, but the failed
logins are missing.

If have read a lot at the internet and have played around with many
different configs.

At the moment i use this modification to the lines above:
<logger name="edu.vt.middleware.ldap" level="INFO"/>

With this modification the failed logins are logged at idp-process.log,
but not only the failed, also the successfull logins are logged here.
That's not the ideal solution for me.

So my question is:
Is there a possibility to log only the failed logins at idp-process.log
or maybe at idp-audit.log?

Would be nice to here from you.
With nice regards.
Martin

-- 
MfG
Martin Lunze

Technische Universität Dresden
Zentrum für Informationsdienste und Hochleistungsrechnen
Trefftz-Bau, HRSK 151
Zellescher Weg 12-14
01062 Dresden

+49 351 463-35881
martin.lunze at tu-dresden.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6160 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130315/4590054a/attachment.bin