CAS logging

[McLennan, Neil R]

David,
If you mean having %attr in the shibboleth.AuditFormattingMap in  audit.xml that is already set.

Neil

From: IAM David Bantz <dabantz at alaska.edu>
Sent: 18 August 2022 18:07
To: Shib Users <users at shibboleth.net>
Cc: McLennan, Neil R <n.mclennan at imperial.ac.uk>; Kevin Foote <kevin.foote at colorado.edu>
Subject: RE: CAS logging

Looks like your audit log contains the CAS service ticket; you likely need to adjust the audit log configuration to include released attributes;

...conf/audit.xml



the idp-process.log can also be configured to provide enormous detail on construction and filtering of attributes….





On 18Aug2022 at 08:13:23, "McLennan, Neil R via users" <users at shibboleth.net<mailto:users at shibboleth.net>> wrote:
Kevin,

attribute-filter.xml file is identical on both servers, so are all the files in config/attributes. The idp_audit.log is not very helpful as shown below.

2022-08-18T16:01:54.456635200Z|146.179.32.222|||https://www.imperial.ac.uk/monitoring/cas/attributes-json/|https://www.apereo.org/cas/protocol/login||||nmhl|||nmhl|ST-AADXGZLDOJSXIMJDLXUYXEXYWYSOETE22WTNR6L7LAZA3EUUZAGEB2DV3CZCJSBJKRY7OSLMAYVZHO2A3LZWXQWC3GP5XRG37UZG36PMSX7NQTDAGCNNO66KD5C4LXWHUG4TMQCUEBLWKORTWK5H7YWBFNZNIXTHYTYUJA52DNJZSUX77EV4FSWOBTZP2RHO3T34FM5FE4EQJ7XEK7BBK733I3PFHIKDBVGROYJLIC3KPYYNA45ONIHQTEMYPVWCKMZ32DQYDI2XRBLTWMA4RZ7VVWNM6OSDHLCGGTMKETFBAMFC7EFSGV6TAYVH3ZY75H76XBC7WYHXDB6XCSD4FNWZC6DK5XGGZA3HTUVCCGHA3SDXGI26ECLNGBQW6KXZYVBW323HHGO5MONCQTIE3NQ54QMYS---||Mozilla/5.0<https://www.imperial.ac.uk/monitoring/cas/attributes-json/|https:/www.apereo.org/cas/protocol/login||||nmhl|||nmhl|ST-AADXGZLDOJSXIMJDLXUYXEXYWYSOETE22WTNR6L7LAZA3EUUZAGEB2DV3CZCJSBJKRY7OSLMAYVZHO2A3LZWXQWC3GP5XRG37UZG36PMSX7NQTDAGCNNO66KD5C4LXWHUG4TMQCUEBLWKORTWK5H7YWBFNZNIXTHYTYUJA52DNJZSUX77EV4FSWOBTZP2RHO3T34FM5FE4EQJ7XEK7BBK733I3PFHIKDBVGROYJLIC3KPYYNA45ONIHQTEMYPVWCKMZ32DQYDI2XRBLTWMA4RZ7VVWNM6OSDHLCGGTMKETFBAMFC7EFSGV6TAYVH3ZY75H76XBC7WYHXDB6XCSD4FNWZC6DK5XGGZA3HTUVCCGHA3SDXGI26ECLNGBQW6KXZYVBW323HHGO5MONCQTIE3NQ54QMYS---||Mozilla/5.0> (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0|||nmhl||||||||||

Neil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220819/e2d160ae/attachment.htm>