Shib logs

[Cantor, Scott]

On 9/21/15, 5:37 PM, "users on behalf of Murthy Nunna" <users-bounces at shibboleth.net on behalf of mnunna at fnal.gov> wrote:

>Good Afternoon,
> 
>I am trying to see list of user ids requesting authentication. I reviewed logs shibd.log and transaction.log in /var/log/shibboleth (I am in Unix). But only thing I see is IP not the userid.
> 
>Is there any log where userid gets logged to?

The NameID is logged to the transaction log. The attribute values recived are not logged, they can contain sensitive information. If REMOTE_USER is populated, then the web server's access log will contain a username in the usual field of an NCSA format log entry.

Otherwise, no.

-- Scott