<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 1/21/16 6:10 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE1127F9F36@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<blockquote type="cite">
<pre wrap="">In V2, you can get this to happen (presumably for any authN method) if you
set the logger for "edu.internet2.middleware.shibboleth.idp.authn" to
DEBUG.
Look for:
successful authentication events: "Login by '<username>' succeeded"
failed authentication events: "Login by '<username>’ failed"
</pre>
</blockquote>
</blockquote>
<br>
Hmmm, I don't see anything like that in my logs with the whole IdP
on DEBUG. All I see is output from the username/password servlet,
but the text is different:<br>
<br>
<tt>19:33:51.551 - DEBUG
[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:194]
- User authentication for putmanb failed</tt><tt><br>
</tt><tt><br>
</tt><tt>19:34:36.749 - DEBUG
[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178]
- Successfully authenticated user putmanb</tt><br>
<br>
I don't have the original OP here, but if you have an actual log
output example, at least with the actual class name, that would be
helpful.<br>
<br>
Barring that, I can't see that we have any generalized output from
the authN subsystem that we could just bump up.<br>
<br>
<br>
<br>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE1127F9F36@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<pre wrap="">
That I was not aware of (I knew nothing was there on INFO). If people think we should raise that to INFO, there is one more patch coming...
</pre>
</blockquote>
<br>
<br>
If there's existing centralized DEBUG output I'm missing, I'll bump
it up, but if it's distributed across all the different login
handler impls, that's probably not as do-able.<br>
<br>
Don't have the beginning of this thread, but not sure how we even
would deal with several cases: 1) the RemoteUser- and
ExternalAuthnSystem- ones, those logs would happen in the external
thing anyway 2) PreviousSession, would we want output from that 3)
IPAddress-, the principal is the same so presumably would want the
IP address.<br>
<br>
But if all we really care about is the JAAS UsernamePassword- output
like my example above, then if people want that bumped to INFO,
that's easy enough.<br>
<br>
<br>
</body>
</html>