Bug 1481330
| Summary: | Backport diagnostic logging | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | John Dennis <jdennis> | |
| Component: | mod_auth_mellon | Assignee: | John Dennis <jdennis> | |
| Status: | CLOSED ERRATA | QA Contact: | Michal Reznik <mreznik> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | high | |||
| Version: | 7.5 | CC: | cdolphy, jdennis, jherrman, jstodola, mreznik, nkinder, pasik, spoore | |
| Target Milestone: | rc | Keywords: | ZStream | |
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | mod_auth_mellon-0.13.1-2.el7 | Doc Type: | Enhancement | |
| Doc Text: |
This update adds diagnostic logging to the mod_auth_mellon module, which makes it possible to easily collect all SAML configuration data and SAML protocol messages in a single file to help troubleshooting mod_auth_mellon deployment problems.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1553854 1578859 (view as bug list) | Environment: | ||
| Last Closed: | 2018-10-30 10:31:06 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1553854, 1578859 | |||
|
Description
John Dennis
2017-08-14 15:34:21 UTC
GSSApproved - need additional diagnostic for troubleshooting cases Verified: [root@saml ~]# cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.6 Beta (Maipo) [root@saml ~]# [root@saml ~]# rpm -qa | grep mellon mod_auth_mellon-diagnostics-0.14.0-2.el7.x86_64 mod_auth_mellon-0.14.0-2.el7.x86_64 Set up RH SSO and log in. We have no diagnostics logs. [root@saml ~]# ls -la /var/log/httpd/mellon_diagnostics ls: cannot access /var/log/httpd/mellon_diagnostics: No such file or directory Load diagnostics module: [root@saml ~]# cat /etc/httpd/conf.modules.d/10-auth_mellon.conf #LoadModule auth_mellon_module modules/mod_auth_mellon.so LoadModule auth_mellon_module modules/mod_auth_mellon-diagnostics.so Enable diagnostics and configure logging: [root@saml ~]# cat /etc/httpd/conf.d/auth_mellon.conf MellonCacheSize 100 MellonLockFile "/run/mod_auth_mellon/lock" MellonDiagnosticsEnable on MellonDiagnosticsFile logs/mellon_diagnostics Reload apache: [root@saml ~]# systemctl reload httpd [root@saml ~]# Log in again and check we have diagnostics logs: [root@saml ~]# ls -la /var/log/httpd/mellon_diagnostics -rw-r--r--. 1 root root 137618 Aug 2 09:37 /var/log/httpd/mellon_diagnostics [root@saml ~]# head /var/log/httpd/mellon_diagnostics ---------------------------------- New Request --------------------------------- GET - /example_app/private/ log_id: (null) server: scheme=(null) hostname=saml.ipa.test port=8443 pid: 1895, tid: 140628553689216 unparsed_uri: /example_app/private/ uri: /example_app/private/ path_info: filename: /var/www/html/example_app/private/ query args: (null) Disable diagnostics logs: [root@saml ~]# cat /etc/httpd/conf.d/auth_mellon.conf MellonCacheSize 100 MellonLockFile "/run/mod_auth_mellon/lock" MellonDiagnosticsEnable off MellonDiagnosticsFile logs/mellon_diagnostics [root@saml ~]# Delete diagnostics log file: [root@saml ~]# rm -f /var/log/httpd/mellon_diagnostics [root@saml ~]# [root@saml ~]# ls -la /var/log/httpd/mellon_diagnostics ls: cannot access /var/log/httpd/mellon_diagnostics: No such file or directory [root@saml ~]# systemctl reload httpd [root@saml ~]# Log in and check we do not have any diagnostics file: [root@saml ~]# ls -la /var/log/httpd/mellon_diagnostics ls: cannot access /var/log/httpd/mellon_diagnostics: No such file or directory Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:3143 |