IdP logging setting question
David Bantz
dabantz at alaska.edu
Mon May 20 20:12:30 EDT 2013
Hoping someone can answer of the top their head what setting(s) for which logger(s) will let me see the IdP's SAML assertion with values of the released attributes.
Below: the settings from my staging IdP where I'm setting new attribute resolution and release and would like to see the outbound assertion with (unencrypted) values of attributes. With these settings I'm seeing only the names of the attributes, not the values (in a log entry headed [INFO: Shibboleth-Audit...]).
David Bantz
---
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<!--
Loggers define indicate which packages/categories are logged, at which level, and to which appender.
Levels: OFF, ERROR, WARN, INFO, DEBUG, TRACE, ALL
-->
<!-- Logs IdP, but not OpenSAML, messages -->
<logger name="edu.internet2.middleware.shibboleth">
<!-- <level value="INFO" /> -->
<level value="DEBUG" />
</logger>
<!-- Logs OpenSAML, but not IdP, messages -->
<logger name="org.opensaml">
<level value="DEBUG" />
</logger>
<!-- Logs LDAP related messages -->
<logger name="edu.vt.middleware.ldap">
<!-- <level value="WARN"/> -->
<level value="DEBUG"/>
</logger>
<!--
<logger name="edu.internet2.middleware.shibboleth.idp.authn">
<level value="INFO" />
</logger>
-->
<!-- Logs inbound and outbound protocols messages at DEBUG level -->
<logger name="PROTOCOL_MESSAGE">
<level value="DEBUG" />
</logger>
<!--
Normally you should not edit below this point. These default configurations are sufficient for
almost every system.
-->
...
More information about the users
mailing list