No Logging for IdP4.0.0

[Jan Oppolzer]

On Fri, Apr 17, 2020 at 04:06:05PM +0200, christian.hauff at rennschmiede-pforzheim.de wrote:
> Despite following the Installation manual, we don't get any log files
> from the IdP at all.

This seems to me like an issue with systemd. Each service is allowed to
write only to specified directories.

For example using Jetty in Debian 10 (Buster), I've had to edit jetty9
service:

# systemctl edit jetty9

And add the following:

[Service]
ReadWritePaths=/opt/shibboleth-idp/logs/
ReadWritePaths=/opt/shibboleth-idp/metadata/

Then reload daemon and restart Jetty:

# systemctl daemon-reload
# systemctl restart jetty9

After this configuration change, Jetty is allowed to write to the
following paths:

# systemctl show jetty9 | grep ReadWritePaths
ReadWritePaths=/var/lib/jetty9 /opt/shibboleth-idp/logs
/opt/shibboleth-idp/metadata

So I guess, it could help you to change tomcat service accordingly.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3458 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20200417/27bc30ad/attachment.bin>