Are all request headers accessible by Shib's Logback?

[John Morton]

Hello again. I am working toward going live with a new 3.3 deployment of Shibboleth, and while doing so, attempting to get our Service Desk a log that has all the relevant information they need to troubleshoot account lockouts.

There is a header that Microsoft appends to ECP requests called X-MS-Forwarded-Client-IP. It contains the true client IP of the device that authenticates with them (that they pass through to us).

I can get this header into my access log with Tomcat's access log valve, as it has access to all headers.

However, it would be really great if I could use Shib's Logback instance to attach this to a message that it already knows about.

I've read about the MDC and the AuditLogging framework, and have played with those, however I have not figured out how to get an arbitrary header.

Does anyone know if this is possible or if I need to rely on Tomcat to log this data?

John Morton
Technical Architect, Application Development & Information Management
Information Technology Services
Cal Poly
San Luis Obispo, California

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180109/66095201/attachment.html>