<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Arial">Hi Peter,<br>
<br>
Could you give me an idea of the knock-on effect changing the
REMOTE_USER might have? I'm reasonably sure it doesn't effect how
our application works, but better make sure. Fixing awstats or
tweaking Apache logs is probably the better way to go, you're
right.<br>
<br>
R<br>
<br>
</font>
<div class="moz-cite-prefix">On 12-09-18 05:41 AM, Peter Schober
wrote:<br>
</div>
<blockquote cite="mid:20120918094151.GR3595@aco.net" type="cite">
<pre wrap="">* Brent Putman <a class="moz-txt-link-rfc2396E" href="mailto:putmanb@georgetown.edu"><putmanb@georgetown.edu></a> [2012-09-18 04:03]:
</pre>
<blockquote type="cite">
<pre wrap="">You can change the precedence list for what it treats as REMOTE_USER
on the ApplicationDefaults element in shibboleth2.xml:
</pre>
</blockquote>
<pre wrap="">
But changing what becomes REMOTE_USER has a lot more consequences than
just the log output, so I find that a reather drastic measure.
Same goes for another method, changing the way persistent NameIDs get
serialized (e.g. by replacing ! with some other character to see
whether that fixes awstats). You might also try to fix awstats itself.
If you do always have an attribute you'd rather have logged but still
want the NameID to be first in REMOTE_USER you could change your httpd
logging config to include %{eppn}e or whatever you'd like in the
log. <a class="moz-txt-link-freetext" href="http://httpd.apache.org/docs/2.2/logs.html">http://httpd.apache.org/docs/2.2/logs.html</a> (LogFormat, CustomLog),
-peter
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
</body>
</html>