logging.xml vs logback.xml

[John Morton]

Hello there. I am attempting to pull various logs from Shib into a single simplified log for use by our Service Desk to help troubleshoot account logouts. Logback (I'm on 3.3) has been great for this in combining messages from idp-process and idp-audit.

However, I have no messages from the vt.ldap JAAS module (for ECP for Office 365) in idp-process. The only place I see messages are in catalina.out (using Tomcat 8).

In older threads, I see references to cranking up "vt.ldap" to DEBUG in "logging.xml" (I think these threads were from v2 era), with the resultant messages being logged to idp-process.log.

However, in my new 3.3 deployment, doing the same thing in "logback.xml" does not result in those messages being logged to idp-process.log.

Does anyone have recommendations for how to get these messages into idp-process, or if not possible, how to control them with Logback?

Also, is adding the "vt.ldap" JAAS module to Tomcat/Jetty still the common way of doing ECP or is there a more recommended / "out-of-the-box" / "built-in" way of doing ECP in Shibboleth 3.3?

John Morton
Technical Architect, Application Development & Information Management
Information Technology Services
Cal Poly
San Luis Obispo, California
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180108/ec6d7ce7/attachment.html>