Ex: Re: Duo flow authn audit

[Paul B. Henson]

On Fri, Apr 07, 2023 at 07:08:48PM +0000, Cantor, Scott wrote:
> There's literally no way what you're saying is possible so "facts not
> in evidence" is the only apparent explanation.

Well, that's frustrating.

So I updated my logback config to only log the Duo message:

  <logger name="Shibboleth-Audit.Duo" level="ALL" additivity="false">
    <appender-ref ref="IDP_AUTHN_AUDIT"/>
  </logger>

As expected, nothing showed up when I did a test login. The I updated
authn.properties to make the password audit entry use the Duo tag:

  idp.authn.Password.audit.category = Shibboleth-Audit.Duo

After another test login the password message showed up again but still
no Duo message. So it seems my logging config is ok. Which would imply
it's not getting logged, but you say that's not possible <sigh>.

Guess it's time to compile a version with more debugging and play code
spelunker.

Thanks...
		

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768