CB Response: Can additional print statements for SAML SSO debugging?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can I add additional print statements for my own SAML SSO debugging?

Environment

• Carbon Black Response: 5.x and above
• SAML/SSO

Resolution

This is not supported, however it is possible to add using Python coding but should be done at your own risk.

Additional Information

• A backup of the file should be made before making any modifications.
• The only CB Response Python (.py) file that we ship with is the SSO attr_map.py (/etc/cb/sso/attr_map.py). The function in this file gets passed in a logger through the logging parameter. Logging can be added there with logger.debug() or logger.info() statements. Files under the sitepackages folder (/usr/share/cb/virtualenv/lib/python2.7/site-packages/saml2/) could be used to find what additional logging statements are available, and follow that call function to find other relevant file to add more logging.