Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: 'Security' added

...

  •  Install*.log
    • The log output that is created by the installer.

Security:

...

Authentication and Session Information 

This logger records authentication (i.e. logging in and out) as well as session information, in particular for distributed sessions, when more than one JOC Cockpit is active in an environment.

The following information has to be added to the log4j.properties file.

...

The

Code Block
languagetext
titleTitle
sessionDAO = com.sos.auth.shiro.SOSDistributedSessionDAO
securityManager.sessionManager.sessionDAO = $sessionDAO

...

  • Code Block
    languagetext
    titleTitle
    #logger for security
    log4j.logger.com.sos.auth=debug, shiro
    log4j.additivity.com.sos.auth= false
    log4j.appender.shiro = org.apache.log4j.FileAppender
    log4j.appender.shiro.layout = org.apache.log4j.EnhancedPatternLayout
    log4j.appender.shiro.layout.ConversionPattern = %d{ISO8601}{Europe/Berlin} %-5p %m%n%throwable{short}
    #filename of shiro log
    log4j.appender.shiro.File = ${jetty.base}/logs/JOCShiroLog.log

     

Distributed Sessions are active when the following lines are included in the [main] section of the shiro ini file or in the JOC Cockpit .... See the  article for more information.

  • Code Block
    languagetext
    titleTitle
    sessionDAO = com.sos.auth.shiro.SOSDistributedSessionDAO
    securityManager.sessionManager.sessionDAO = $sessionDAO