Question on Logging

[Brewer, Lee]

Scott,

Yes, I came to the exact same conclusion (my original question) earlier but I am having a problem figuring out what is wrong with my current logging.xml configuration.  I have the following in my logging.xml

<logger name="edu.internet2.middleware.shibboleth.idp.common.attribute" level="DEBUG" />

So, I assume, that there should be output in my idp-process log for common.attribute; there is not.  So, since I don't see anything wrong with that element, and some of the others are working (I am getting debug from other entries)... what would cause the logger not to log anything for common.attribute?

Thanks,
Lee



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, November 13, 2015 9:58 AM
To: Shib Users
Subject: Re: Question on Logging

On 11/13/15, 10:26 AM, "users on behalf of Brewer, Lee" <users-bounces at shibboleth.net on behalf of lee.brewer at Vanderbilt.Edu> wrote:



>Then I can see the SAML response which contains the attributes and values.
>As noted.. there is nothing here about common.attribute and LDAP.

There's nothing remotely resembling a V2 log trace there at all, actually. There are a ton of things that would be logged unless they're turned off.

You're also creating a ton of noise by logging the opensaml category.

The first log line of the attribute resolution during SSO is:

10:50:03.067 - 128.146.94.198 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:478] - Resolving attributes for principal 'cantor.2' for SAML request from relying party 'https://carmenwiki.osu.edu/shibboleth'


(Just ran a test in dev here to see what it was.)

The attribute stuff is mostly in edu.internet2.middleware.shibboleth.common.attribute: e.g.

10:50:03.067 - 128.146.94.198 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:119] - shibboleth.AttributeResolver resolving attributes for principal cantor.2
10:50:03.067 - 128.146.94.198 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:275] - Specific attributes for principal cantor.2 were not requested, resolving all attributes.
10:50:03.067 - 128.146.94.198 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314] - Resolving attribute eduPersonPrincipalName for principal cantor.2


So I guess you have a broken logging config, basically.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net