native SP logger enhancement: include applicationId
Guillaume Rousse
guillaume.rousse at renater.fr
Wed Apr 18 05:22:21 EDT 2018
Hello.
We host our federated applications behind dedicated HTTP
reverse-proxies, running a single instance of shibboleth SP for a large
number of different SAML entities (about 30, currently).
For each application, we have an apache virtual host definition:
<VirtualHost *:443>
ServerName foo.renater.fr
<Location />
AuthType shibboleth
ShibRequestSetting applicationId foo
Require shibboleth
</Location>
</VirtualHost>
And the related configuration override defined in Shibboleth SP
configuration:
<ApplicationOverride id="foo" entityID="https://foo.renater.fr"/>
Whereas it is quite easy to identify which application is concerned by
shibd logs, because they include entityId or applicationId, that's not
the case for native logs... Currently, those logs are flooded by such
kind of content, and I'm unable to identity which application is
responsible:
INFO Shibboleth.SessionInitiator.SAMLDS [24273] shib_check_user:
postData property not supplied, form data will not be preserved across SSO
Could mod_shib traces include applicationId for easier correlation ?
Regards.
--
Guillaume Rousse
Pôle SSI
Tel: +33 1 53 94 20 45
www.renater.fr
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3637 bytes
Desc: Signature cryptographique S/MIME
URL: <http://shibboleth.net/pipermail/users/attachments/20180418/2dfa447c/attachment.p7s>
More information about the users
mailing list