As I mentioned in the thread, I think the MDC variable could be used as a hack/workaround to get the IP addr into the audit log(s), until this is fixed. It would just have to be either the first or the last field, obviously.
Tom Zeller
January 30, 2015 at 6:37 PM
The absent request in the audit class seems like a different bug/issue, unless I'm missing something.
I think it depends on whether we're talking about logging to idp-process.log or idp-consent-audit.log, as you've already realized. This would be the bug for logging to idp-consent-audit.log.
Brent Putman
January 30, 2015 at 6:16 PM
Our posts met in mid-ether. The absent request in the audit class seems like a different bug/issue, unless I'm missing something.
Audit fields that depend on the HttpServletRequest are not available because the request object is not properly wired into the consent flows.
http://marc.info/?l=shibboleth-users&m=142263380002065