idpv3 testing: clientIP in audit logs and consent jdbc ?

[Tom Zeller]

On Fri, Jan 30, 2015 at 10:02 AM, Jarno Huuskonen
<jarno.huuskonen at uef.fi> wrote:
> Hi,
>
> I've started testing idp-v3 (this is on a cloned idp-2.4.3 vm so for
> now it's still tomcat7/java7).
>
> I've couple of questions:
> Is it possible to get clientIP address in audit logs ?
> I didn't get (v2.4.3 <Pattern>%msg%mdc{clientIP}|%n</Pattern>) to
> work (this appends clientIP string (not the address to audit logs).
> (Editing audit.xml didn't work any better).

I'll try to reproduce.

> Consent/uApprove: our current idp uses mysql database for uApprove
> consent. Is it possible(how) to configure idpv3 to use database storage for
> consent (I didn't find any docs for this) ?

Yes. I believe it's straightforward. I'll reply with an example.

> Is the v3 consent module tolerant(asks user for consent and allows
> login to continue) to jdbc/database errors ?

In general yes, but I have not rigorously tested. I guess it depends
on the error, but I think I understand what you are asking.

I plan on responding with more information soon, unless someone else does first.

Tom