-
1. Re: Getting identity in server log files
ericjava.eric.chiralsoftware.net Dec 10, 2008 10:57 PM (in response to ericjava.eric.chiralsoftware.net)Anyone? Is there a way to get the log files to record the identity?
-
2. Re: Getting identity in server log files
dro_k Dec 11, 2008 12:06 AM (in response to ericjava.eric.chiralsoftware.net)This is not really a Seam related post but what you need to do is to create a filter that puts the Identity inside Log4j's MDC.
- Drew
-
3. Re: Getting identity in server log files
ericjava.eric.chiralsoftware.net Dec 12, 2008 12:23 AM (in response to ericjava.eric.chiralsoftware.net)I don't think this has anything to do with log4j. Tomcat doesn't (AFAIK) use log4j for outputting its server access logs.
I know that if I configure a web.xml with security-constraint, security-role and login-config, then it logs access to the pages with the user's name, right there in the access logs. That is very convenient. I can quickly see which pages a user accessed, and because these are all in standard web server log formats, I can also analyze them with standard log analysis tools.
I had thought that Seam's Identity Management would do the same thing but it does not. I get all these lines in the log files showing that some user accessed a private page, but it doesn't tell me which user. That's very inconvenient. It means that I need to write another parallel logging system to record the identity data with the requests.
I would have thought that this would be fixed.
-
4. Re: Getting identity in server log files
ericjava.eric.chiralsoftware.net Dec 12, 2008 12:30 AM (in response to ericjava.eric.chiralsoftware.net)I just checked, Tomcat doesn't use log4j for access logs.
-
5. Re: Getting identity in server log files
ericjava.eric.chiralsoftware.net Dec 12, 2008 10:41 PM (in response to ericjava.eric.chiralsoftware.net)Anyone? Should I file a JIRA on this?
-
6. Re: Getting identity in server log files
shane.bryzak Dec 13, 2008 1:53 PM (in response to ericjava.eric.chiralsoftware.net)Logging is not a concern of Identity Management, if you need this then you'll have to customise whatever logging API you're using to support logging the principal.