Duo flow authn audit
Cantor, Scott
cantor.2 at osu.edu
Fri Apr 7 19:08:48 UTC 2023
> Yep, net.shibboleth.idp.authn.duo.successes is increasing.
Well, it writes to the audit log on an adjacent line of code to the line that increments that.
doAudit(profileRequestContext);
super.recordSuccess(profileRequestContext);
The superclass method increments the counter.
> So if I enable the authentication auditing, but don't add any additional logging
> config, it should just end up in the existing audit log file, right?
The process log is the default appender, but if you have a logger for Shibboleth-Audit going somewhere it would probably pick them up if the names match.
> I'm using the legacy Duo stuff still, not the universal prompt, does that make a
> difference?
The plugin has a different logging mechanism until they get aligned down the road, so it's the opposite, the original flow uses the same general approach Password does.
There's literally no way what you're saying is possible so "facts not in evidence" is the only apparent explanation.
-- Scott
More information about the users
mailing list