I'm currently trying to configure the shibdelegator to work with a
WAYF downloaded from shibboleth. I've tried configuring the log4j.xml
as per your instructions but no shib.log is being generated.
Currently I have a variable set as -Dshibdeleg.data=/home/esoe/opt/
esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as
the shibdelegator locates the config files and certificates
succesfully.
I have added the logging configuration you suggest in your
shibdelegator documentation, except I change ${shibdelegator.data} to $
{shibdeleg.data} to match the variable already set.
I have also tried to hardcode directly into the param value="/home/
esoe/opt/esoe/shibdelegator/logging/shib.log" without success.
> I'm currently trying to configure the shibdelegator to work with a > WAYF downloaded from shibboleth. I've tried configuring the log4j.xml > as per your instructions but no shib.log is being generated.
> Currently I have a variable set as -Dshibdeleg.data=/home/esoe/opt/ > esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as > the shibdelegator locates the config files and certificates > succesfully.
> I have added the logging configuration you suggest in your > shibdelegator documentation, except I change ${shibdelegator.data} to $ > {shibdeleg.data} to match the variable already set.
> I have also tried to hardcode directly into the param value="/home/ > esoe/opt/esoe/shibdelegator/logging/shib.log" without success.
Checkout the file log4j.xml in $tomcat/shibdeleg/WEB-INF/classes and try setting a value directly in there for path to see if that helps.
Apart from that all I can really think of is that some other component is hosing your SLF4j/Log4j setup, possibly jars in common/lib or shared/lib of Tomcat.
Bradley
> Thanks > Bruge
-- Bradley Beddoes Lead Software Architect Intient Pty Ltd
I'm a little confused by Shibboleth Authentication Delegator
documentation and would like some clarification as I may have
completely missed the point. Under the User Interaction section you
say "This redirection is configured as part of your shibboleth SP".
Does this mean that the shibdelegator is dependant on some third party
shibboleth SP software to be installed eg from shibboleth.internet2?
> > I'm currently trying to configure the shibdelegator to work with a
> > WAYF downloaded from shibboleth. I've tried configuring the log4j.xml
> > as per your instructions but no shib.log is being generated.
> > Currently I have a variable set as -Dshibdeleg.data=/home/esoe/opt/
> > esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as
> > the shibdelegator locates the config files and certificates
> > succesfully.
> > I have added the logging configuration you suggest in your
> > shibdelegator documentation, except I change ${shibdelegator.data} to $
> > {shibdeleg.data} to match the variable already set.
> > I have also tried to hardcode directly into the param value="/home/
> > esoe/opt/esoe/shibdelegator/logging/shib.log" without success.
> Checkout the file log4j.xml in $tomcat/shibdeleg/WEB-INF/classes and try
> setting a value directly in there for path to see if that helps.
> Apart from that all I can really think of is that some other component
> is hosing your SLF4j/Log4j setup, possibly jars in common/lib or
> shared/lib of Tomcat.
Hi, In short yes. The delegator should be protected by the standard shibboleth 1.x SP software.
We weren't about to try and write our own software to support this shibboleth profiles when this was already done.
Essentially the shibboleth process happens as per usual to a shib SP. The delegator then reads all the details about the shib user from the established session and sets them up inside ESOE. Once this is done they are redirected to ESOE content.
> I'm a little confused by Shibboleth Authentication Delegator > documentation and would like some clarification as I may have > completely missed the point. Under the User Interaction section you > say "This redirection is configured as part of your shibboleth SP". > Does this mean that the shibdelegator is dependant on some third party > shibboleth SP software to be installed eg from shibboleth.internet2?
> On Oct 1, 2:06 am, Bradley Beddoes <bedd...@intient.com> wrote: >> Hi,
>> Bruge wrote: >>> Hi Bradley/Shaun, >>> I'm currently trying to configure the shibdelegator to work with a >>> WAYF downloaded from shibboleth. I've tried configuring the log4j.xml >>> as per your instructions but no shib.log is being generated. >>> Currently I have a variable set as -Dshibdeleg.data=/home/esoe/opt/ >>> esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as >>> the shibdelegator locates the config files and certificates >>> succesfully. >>> I have added the logging configuration you suggest in your >>> shibdelegator documentation, except I change ${shibdelegator.data} to $ >>> {shibdeleg.data} to match the variable already set. >>> I have also tried to hardcode directly into the param value="/home/ >>> esoe/opt/esoe/shibdelegator/logging/shib.log" without success. >> Checkout the file log4j.xml in $tomcat/shibdeleg/WEB-INF/classes and try >> setting a value directly in there for path to see if that helps.
>> Apart from that all I can really think of is that some other component >> is hosing your SLF4j/Log4j setup, possibly jars in common/lib or >> shared/lib of Tomcat.
>> Bradley
>>> Thanks >>> Bruge >> -- >> Bradley Beddoes >> Lead Software Architect >> Intient Pty Ltd