Introduction
...
Log
...
format
...
Log format
The F-TICKS format implemented by this log appender is a generalization of the eduroam F-TICKS format:
Code Block |
---|
'F-TICKS/' federationIdentifier '/' version *('#' attribute '=' value ) '#'
|
In eduroam SWAMID federationIdentifier
is 'eduroamSWAMID' and version
is '1.0'. This implementation allows these values to be defined. The eduroam pattern SHOULD NOT be reused, instead consider using something that identifies the federation.
The attributes exposed are:
Name | Description |
---|---|
TS | the login time stamp |
RP | the relying party entityID |
AP | the asserting party entityID (typcially the IdP) |
PN | a sha256-hash of the local principal name and a unique key |
AM | the authentication method URN |
The
...
instruction is know to work for Shibboleth Identity Provider version 3.1 or later.
Configuration
Configuration is done in loggingidp.xmlproperties:
Appender
Salt
Use the following command to generate a saltAdd an appender definition to logging.xml close to where the other appenders are.
Code Block |
---|
<appender name="IDP_FTICKS" class="net.nordu.logback.FTicksAppender">
<syslogHost>syslog.swamid.se</syslogHost>
<federationIdentifier>swamid</federationIdentifier>
<version>1.0</version>
<keyFile>/opt/shibboleth-idp/conf/fticks-key.txt</keyFile>
</appender>
|
...
openssl rand -base64 36 2>/dev/null |
Warning |
---|
Do not loose lose this file salt once you've started to generate logs |
...
. If this salt is lost or reset then all local principal names will appear to have changed to analysis tools so avoid this! |
Enable the
...
logging
Add the appender to the Shibboleth-Audit logger by changing
Code Block |
---|
<logger name="Shibboleth-Audit" level="ALL">
<appender-ref ref="IDP_AUDIT" />
</logger>
|
to
Code Block |
---|
<logger name="Shibboleth-Audit" level="ALL">
<appender-ref ref="IDP_AUDIT" />
<appender-ref ref="IDP_FTICKS" />
</logger>
|
This assumes that you haven't changed logging.xml from the default.
Build software
Code Block |
---|
# git clone git://github.com/leifj/ndn-shib-fticks.git
# cd ndn-shib-fticks
# mvn
... build finishes ...
|
The target directory should contain a jar-file. This is what you need for the next step.
Install software
...
following options to idp.properties
Code Block |
---|
idp.fticks.federation=SWAMID
idp.fticks.algorithm=SHA-256
idp.fticks.salt=<salt>
idp.fticks.loghost=syslog.swamid.se
|