How to turn on debugging for activation conditions?
Vivien Wu
vivienwu at stanford.edu
Thu Mar 9 13:33:28 EST 2017
We are debugging an activation condition in relying-party so we turned on the following in logbackxml
<variable name="idp.loglevel.idp" value="DEBUG" />
<variable name="idp.loglevel.opensaml" value="DEBUG" />
though the messages are not as verbose as we'd hope for.
Is there any other place we can change to see more debugging information from the activation conditions?
<<in the scenario that it succeeded>>
2017-03-08 16:37:05,471 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:persistent]
2017-03-08 16:37:05,471 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:117] - Metadata did not specify any formats, relying on configuration alone
<<in the case that it failed>>
2017-03-08 16:27:14,390 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: []
2017-03-08 16:27:14,390 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:110] - No formats specified in configuration or in metadata, returning default
<<activation-conditions-relying-party-nameid.xml>>
<bean id="ac_RelyingParty_SAML20NameIDPersistent" parent="shibboleth.Conditions.RelyingPartyId">
<constructor-arg>
<list>
<value>http://foo1.com</value>
<value>http://foo2.com</value>
</list>
</constructor-arg>
</bean>
<<relying-party.xml>>
<!-- 12. "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" -->
<bean id="RelyingParty_SAML20NameIDPersistent" parent="RelyingParty" p:activationCondition-ref="ac_RelyingParty_SAML20NameIDPersistent">
<property name="profileConfigurations">
<list>
<bean parent="SAML2.SSO" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
<bean parent="SAML2.ECP" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
</list>
</property>
</bean>
Thanks,
-Vivien Wu
University IT
Stanford University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170309/ee411bdf/attachment.html>
More information about the users
mailing list