How to add client IP to idp-audit.log in IDP3

O'Dowd, Josh Josh.O'Dowd at mso.umt.edu
Wed Oct 21 18:30:52 EDT 2015


Cool, thanks Scott.

-Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, October 21, 2015 4:27 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: How to add client IP to idp-audit.log in IDP3

On 10/21/15, 6:02 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:



>Good afternoon,
> 
>I am looking at the /conf/audit.xml to extend the default auditing messaging to append the client IP address.

Using the MDC support and the idp.remote_addr field defined for that is the simplest way to do that, as long as you can live with it appearing before or after the formatted message.

I'm a bit unsure why I didn't include that as an audit field, you can request that if you want.

I also don't seem to have documented all the built in audit fields either, I must have forgotten to get back to it.

>I am seeing in the IDP3 docs that logging can be extended by writing a ‘function’, or Function<ProfileRequestContext,Object> and instantiating in one of the available field extractor maps in audit.xml.  Is this referring to an implementation of a java.util.function in JAVA 8?

No, Guava's Function interface.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list