With CAS v6.x, we used to get audit logs that looks something akin to:
2024-03-02 00:00:00,403 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: joeuser
WHAT: {result=Service Access Granted, service=https:/example.edu/app,
requiredAttributes={}}
ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
APPLICATION: CAS
WHEN: Sat Mar 02 00:00:00 HST 2024
CLIENT IP ADDRESS: 192.0.0.192
SERVER IP ADDRESS: 10.10.10.10
=============================================================
>
(and similar others)
And our configs would additionally log them to a separate audit log file.
However, since upgrading to cas v7, we are no longer generating these logs.
I've tried explicitly enabling audit logging in our cas.,properties with:
cas.audit.engine.enabled=true
But still nothing. I also don't see a WAR overlay dependency for
build.gradle that looks appropriate?
I think our audit log is also defined in log4j2.xml which contains:
=====
<!-- CAS audit log -->
<RollingFile name="auditlogfile"
fileName="${baseDir}/cas_audit.log" append="true"
...
<CasAppender name="casAudit">
<AppenderRef ref="auditlogfile" />
</CasAppender>
...
<Logger name="org.apereo.inspektr.audit.support" additivity="true"
level="info">
<AppenderRef ref="casConsole" />
<AppenderRef ref="casFile" />
<AppenderRef ref="casAudit" />
</Logger>
=====
Any ideas what we're missing to enable audit logging once again?
Reference: <https://apereo.github.io/cas/7.0.x/audits/Audits.html>
--
Baron Fujimoto <ba...@hawaii.edu> ::: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum descendus pantorum
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL1q5mnSAbkH5sOaGytNgBH3600ULyYjFKKH3N5FGOXOOg%40mail.gmail.com.
