why is SAML authN request logged twice?

35 views
Skip to first unread message

Yan Zhou

unread,
Sep 9, 2024, 9:15:51 PM9/9/24
to CAS Community
hi there,

CAS 6.6.x.  Not sure why I always see SAML request twice, but response only once.

This seems a logging set-up issue, which class implements the logging of PROTOCOL_MESSAGE?


2024-09-09 18:12:02,821 DEBUG [https-openssl-nio-8443-exec-3] [PROTOCOL_MESSAGE] - <?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="https://localhost:8443/cas/login?client_name=MyPing" AttributeConsumingServiceIndex="0" Destination="https://.....com/idp/SSO.saml2" ForceAuthn="true" ID="_0af0253167984996996fdc40bde6007e32b1603" IsPassive="false" IssueInstant="2024-09-09T18:12:02.797Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://localhost:8443/cas/samlpingsp</saml2:Issuer></saml2p:AuthnRequest>
2024-09-09 18:12:02,927 DEBUG [https-openssl-nio-8443-exec-3] [PROTOCOL_MESSAGE] - <?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="https://localhost:8443/cas/login?client_name=MyPing" AttributeConsumingServiceIndex="0" Destination="https://.....com/idp/SSO.saml2" ForceAuthn="true" ID="_0af0253167984996996fdc40bde6007e32b1603" IsPassive="false" IssueInstant="2024-09-09T18:12:02.797Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://localhost:8443/cas/samlpingsp</saml2:Issuer></saml2p:AuthnRequest>


        <RollingFile name="samlLogFile" fileName="${baseDir}/cas_saml.log" append="true"
                     filePattern="${baseDir}/cas_saml-%d{yyyy-MM-dd-HH}-%i.log"
                     immediateFlush="false">
......
        </RollingFile>

        <Logger name="org.opensaml" level="info" additivity="false">
<AppenderRef ref="casSamlLogFile"/>
</Logger>
        <Logger name="PROTOCOL_MESSAGE" level="trace" additivity="false" >
<AppenderRef ref="casSamlLogFile"/>
</Logger>

thanks!
Yan
Reply all
Reply to author
Forward
0 new messages