How to turn on debugging for activation conditions?

Vivien Wu vivienwu at stanford.edu
Thu Mar 9 13:33:28 EST 2017


We are debugging an activation condition in relying-party so we turned on the following in logbackxml

    <variable name="idp.loglevel.idp" value="DEBUG" />
    <variable name="idp.loglevel.opensaml" value="DEBUG" />

though the messages are not as verbose as we'd hope for.

Is there any other place we can change to see more debugging information from the activation conditions?




<<in the scenario that it succeeded>>

2017-03-08 16:37:05,471 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:persistent]
2017-03-08 16:37:05,471 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:117] - Metadata did not specify any formats, relying on configuration alone




<<in the case that it failed>>

2017-03-08 16:27:14,390 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: []
2017-03-08 16:27:14,390 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:110] - No formats specified in configuration or in metadata, returning default




<<activation-conditions-relying-party-nameid.xml>>


    <bean id="ac_RelyingParty_SAML20NameIDPersistent" parent="shibboleth.Conditions.RelyingPartyId">
      <constructor-arg>
        <list>
          <value>http://foo1.com</value>
          <value>http://foo2.com</value>
        </list>
      </constructor-arg>
    </bean>






<<relying-party.xml>>


        <!-- 12.  "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"  -->
        <bean id="RelyingParty_SAML20NameIDPersistent" parent="RelyingParty" p:activationCondition-ref="ac_RelyingParty_SAML20NameIDPersistent">
          <property name="profileConfigurations">
            <list>
              <bean parent="SAML2.SSO" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
              <bean parent="SAML2.ECP" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
            </list>
          </property>
        </bean>




Thanks,


-Vivien Wu

University IT

Stanford University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170309/ee411bdf/attachment.html>


More information about the users mailing list