Decrypting SAML assertion ad-hoc

[Kevin Foote]

On Jun 10, 2014, at 4:02 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/10/14, 7:00 PM, "Kevin Foote" <kpfoote at uoregon.edu> wrote:
>> Uncomment these two lines in the shibd.logger config..
>> 
>> log4j.category.OpenSAML.MessageDecoder=DEBUG
>> log4j.category.OpenSAML.MessageEncoder=DEBUG
>> 
>> You¹ll start to see lines like below Š
>> 
>> 2014-06-10 15:56:19 DEBUG OpenSAML.MessageDecoder.SAML2POST [9]:
>> validating input
>> 2014-06-10 15:56:19 DEBUG OpenSAML.MessageDecoder.SAML2POST [9]: decoded
>> SAML message:
>> <?xml version="1.0" encoding="UTF-8"?><saml2p:Response
>> xmlns:saml2p=³urn:oasis:names:tcŠ
> 
> Those won't log decrypted content, I'm fairly sure you have to log the
> category I mentioned for that.

Ah yea.. theres the one to un-comment.

log4j.category.Shibboleth.SSO.SAML2=DEBUG, shibd_log

--------
thanks
 kevin.foote