Tomcat logs in TIER docker container

[Paul Caskey]

The access-log should be there, though it is a special case in tomcat.

If you’ve made changes to tomcat’s server.xml, that may be the problem.

The access-log requires a valve in server.xml (inside the Host element), like this:
        <Valve className="org.apache.catalina.valves.AccessLogValve"
               directory="/tmp" prefix="tomcat_access_log"
               rotatable="false" pattern="%h %l %u %t "%r" %s %b" />

HTH,
-Paul


From: Mohamed Lrhazi <lrhazi at cua.edu>
Sent: Tuesday, March 14, 2023 10:08 AM
To: Paul Caskey <pcaskey at internet2.edu>
Cc: Shib Users <users at shibboleth.net>
Subject: Re: Tomcat logs in TIER docker container

Actually maybe not quite. I see some tomcat logs, but not access logs.
I can find the access logs in /usr/local/tomcat/logs/localhost_access_log..2023-03-14.txt, but not in stdout.

Is that intentional?

Thanks,
Mohamed.


On Tue, Mar 14, 2023 at 11:01 AM Mohamed Lrhazi <lrhazi at cua.edu<mailto:lrhazi at cua.edu>> wrote:
Yes! switching to that image fixed it. Thanks a lot Paul!

On Tue, Mar 14, 2023 at 10:44 AM Paul Caskey <pcaskey at internet2.edu<mailto:pcaskey at internet2.edu>> wrote:
Hi Mohamed

The images have moved over to the ‘i2incommon’ repo in the docker hub, so ‘i2incommon/shib-idp’

I just did a quick test of the latest images and am not seeing any issues with tomcat logging.

Here’s what it looks like:
[]$ docker logs a55992c1f7f8

BUILD SUCCESSFUL
Total time: 4 seconds
tomcat;console;dev;nothing;NOTE: Picked up JDK_JAVA_OPTIONS:  --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io<http://java.io>=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:31,534 [main] WARN  org.apache.tomcat.util.net.SSLHostConfig- The protocol [TLSv1.3] was added to the list of protocols on the SSLHostConfig named [_default_]. Check if a +/- prefix is missing.
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:31,542 [main] WARN  org.apache.tomcat.util.net.SSLHostConfig- The property [Certificate.certificateKeystoreFile] was set on the SSLHostConfig named [_default_] and is for the [JSSE] configuration syntax but the SSLHostConfig is being used with the [OPENSSL] configuration syntax
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,004 [main] INFO  org.apache.coyote.http11.Http11NioProtocol- The ["https-jsse-nio-443"] connector has been configured to support negotiation to [h2] via ALPN
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,006 [main] INFO  org.apache.coyote.http11.Http11NioProtocol- Initializing ProtocolHandler ["https-jsse-nio-443"]
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,529 [main] INFO  org.apache.catalina.startup.Catalina- Server initialization in [1252] milliseconds
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,545 [main] INFO  org.apache.catalina.core.StandardService- Starting service [Catalina]
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,545 [main] INFO  org.apache.catalina.core.StandardEngine- Starting Servlet engine: [Apache Tomcat/9.0.71]
tomcat;catalina.out;dev;nothing;2023-03-14 14:38:32,589 [main] INFO  org.apache.catalina.startup.HostConfig- Deploying web application archive [/usr/local/tomcat/webapps/idp.war]





From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> On Behalf Of Mohamed Lrhazi via users
Sent: Tuesday, March 14, 2023 9:24 AM
To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Cc: Mohamed Lrhazi <lrhazi at cua.edu<mailto:lrhazi at cua.edu>>
Subject: Tomcat logs in TIER docker container

Hello,

Not sure if I am messing up the provided image somehow, but am not seeing any logs from tomcat! Only shib-idp logs are showing in the container output.

Was this a change in the recent versions of the image build?

Thanks,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230314/c970dc0f/attachment.htm>