Logging Client IP address
Scott Battaglia
scott.battaglia at gmail.com
Tue Apr 29 15:36:10 EDT 2008
Please see:
http://code.google.com/p/inspektr/wiki/EnablingStatisticsAndAuditing
That describes how to enable auditing (which logs the IP address). You
should also find details on writing a class to log the details where you
want (or the table structure if you want to use our organizational
structure).
As for configuring it, its pretty simple as long as you understand the
Spring-based configuration files :-)
We have an example in
CAS_HOME/cas-server-webapp/WEB-INF/unused-spring-configuration
Merely copy the auditTrailContext.xml from unused-spring-configuration to
WEB-INF/spring-configuration and rebuild your WAR file.
-Scott
On Tue, Apr 29, 2008 at 1:37 PM, Giron, Renato <
Angel.R.GironDelCid at lonestar.edu> wrote:
> I was about to ask how to log the IP address myself. I am not familiar
> with how CAS work or its config files. I would really appreciate it if
> you share with me how to accomplish this task.
>
> Thank you all!.
>
>
> -----Original Message-----
> From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu]
> On Behalf Of iversion
> Sent: Saturday, April 26, 2008 11:53 PM
> To: cas at tp.its.yale.edu
> Subject: Re: Logging Client IP address
>
>
> You can look into the
> ThrottledSubmissionByIpAddressHandlerInterceptorAdapter
> in the package org.jasig.cas.web.support for some clues.
> ThrottledSubmissionByIpAddressHandlerInterceptorAdapter try to log the
> user's ip if the user's login fail.
>
>
> Eric Pierce wrote:
> >
> > Right now, this is what is logged on a successful auth:
> > 2008-04-25 09:08:17,236 INFO
> > [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service
> ticket
> > [ST] for service [Service_URL] for user [USERNAME]
> >
> > How can I add the user's IP address to this log entry? If I crank the
> > logging up to DEBUG, I get the client's IP from the Spring Framework,
> but
> > I
> > also get the user's password in plain-text. I tried correlating the
> > cas.log
> > entries with Apache's access_log, but that's no help -- I had 8
> separate
> > users log in at the exact same time. Normally, I'd just look at the
> logs
> > for the Service Provider, but I don't have access to the SP in this
> case
> > (Google Apps).
> >
> > If somebody could point me in the right direction on this I'd
> appreciate
> > it.
> >
> > Thanks!
> >
> > -Eric
> >
> >
> > --
> > Eric Pierce, RHCE -- University of South Florida -- (813) 974-8868 --
> > epierce at usf.edu
> >
> > _______________________________________________
> > Yale CAS mailing list
> > cas at tp.its.yale.edu
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Logging-Client-IP-address-tp16898429p16918358.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080429/d672416e/attachment.html
More information about the cas
mailing list