Log SOAP Binding Credential
Cantor, Scott
cantor.2 at osu.edu
Thu Jan 23 15:01:56 EST 2014
On 1/23/14, 2:31 PM, "Marvin Addison" <marvin.addison at gmail.com> wrote:
>
>The message is a SOAP binding message that is clearly logged, so it's
>getting past the container trust manager. I would think the next step
>is to confirm the certificate matches what's expected in the metadata.
>Is there a logger I can turn up to log the PEM-encoded certificate
>that the container provides to the IdP when terminating a SOAP binding
>request?
Not sure, but IIRC there are additional log messages from the trust
engine(s) that I thought mentioned the certificate subject at least. I
don't recall ever seeng the whole certificate, no.
Note that it's possible there's no certificate coming in at all also,
unless the connector is configured to require them.
-- Scott
More information about the users
mailing list