...
The two "halves" of the SP software write to separate diagnostic log files by default, as configured by the shibd.logger and native.logger logging setup files. Some native.log messages will also be routed to the web server's own log or the Windows error log.
| Tip |
|---|
It's |
...
common, particularly on non-Windows platforms, for the web server "half" to produce no dedicated logging because of Apache's restricted permissions. If you don't see that log, you'll have to adjust file permissions so that the Apache user account (typically "www", "apache", or "nobody") has the ability to create and write to files in the necessary directory. |
Most of the interesting and relevant information will usually be found in the shibd.log, particularly SAML-related problems, Metadata issues, and most security issues.
...