<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<img id="email-avatar" src="https://issues.shibboleth.net/jira/secure/useravatar?avatarId=10202" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="stefanl@idp.protectnetwork.org" id="email_stefanl@idp.protectnetwork.org" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=stefanl%40idp.protectnetwork.org" style="color:#326ca6;">stefanl@idp.protectnetwork.org</a>
created <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-583'>SIDP-583</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-583'><strong>Wrong user is resolved with LDAP connector after authentication with help of UserPassword module</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Issue Type:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> Bug
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Affects Versions:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
2.4.0 </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Assignee:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#326ca6;">Scott Cantor</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Components:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
Authentication </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Created:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
17/Jun/13 7:40 AM
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Description:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>Hello!</p>
<p style='margin-top:0;margin-bottom:10px;'>It seems a previous session's login is used when resolving the LDAP attributes.</p>
<p style='margin-top:0;margin-bottom:10px;'>Using UsernamePassword authentication handler without PreviousSession handler. I am using tomcat6 on linux with an apache https proxy.</p>
<p style='margin-top:0;margin-bottom:10px;'>To reproduce.<br/>
1. Login with HTTP-REDIRECT binding to SP with user1. logout from SP, but not IdP.<br/>
2. Use same browser to login again but this time as user2. The IdP sends user1 to SP.</p>
<p style='margin-top:0;margin-bottom:10px;'>Seems the cookies stored in the webbrowser has something to do with it. If I kill them I can login again as a different user.</p>
<p style='margin-top:0;margin-bottom:10px;'>In the logfile we can see that in the same request user saml2-stefan authenticates which is what i typed in. But the saml3-stefan user is what's returned to the SP. (the user I logged in with earlier).<br/>
11:38:39.646 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:170]</span> - Attempting to authenticate user saml2-stefanl<br/>
11:38:39.647 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:180]</span> - useFirstPass = false<br/>
11:38:39.647 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:181]</span> - tryFirstPass = false<br/>
11:38:39.648 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:182]</span> - storePass = false<br/>
11:38:39.648 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:183]</span> - clearPass = false<br/>
11:38:39.648 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:184]</span> - setLdapPrincipal = true<br/>
11:38:39.648 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:185]</span> - setLdapDnPrincipal = false<br/>
11:38:39.648 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:186]</span> - setLdapCredential = true<br/>
11:38:39.649 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:187]</span> - defaultRole = []<br/>
11:38:39.649 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:188]</span> - principalGroupName = null<br/>
11:38:39.649 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:189]</span> - roleGroupName = null<br/>
11:38:39.649 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:77]</span> - userRoleAttribute = []<br/>
11:38:39.650 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:83]</span> - Created authenticator: edu.vt.middleware.ldap.auth.AuthenticatorConfig@358106942::env=</p>
{java.naming.provider.url=ldap://localhost, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory}
<p style='margin-top:0;margin-bottom:10px;'>11:38:39.651 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:102]</span> - Looking up DN using userFilter<br/>
11:38:39.651 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:193]</span> - Search with the following parameters:<br/>
11:38:39.651 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:194]</span> - dn = ou=people,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.651 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:195]</span> - filter = uid=</p>
{0}<br/>
11:38:39.651 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:196]</span> - filterArgs = <span class="error">[saml2-stefanl]</span><br/>
11:38:39.652 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:197]</span> - searchControls = javax.naming.directory.SearchControls@56ad4264<br/>
11:38:39.652 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:198]</span> - handler = <span class="error">[edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@8e1dfb1]</span><br/>
11:38:39.652 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74]</span> - Bind with the following parameters:<br/>
11:38:39.652 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75]</span> - authtype = simple<br/>
11:38:39.652 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76]</span> - dn = null<br/>
11:38:39.653 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83]</span> - credential = <suppressed><br/>
11:38:39.656 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74]</span> - Bind with the following parameters:<br/>
11:38:39.656 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75]</span> - authtype = simple<br/>
11:38:39.656 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76]</span> - dn = uid=saml2-stefanl,ou=people,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.656 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83]</span> - credential = <suppressed><br/>
11:38:39.658 - INFO <span class="error">[edu.vt.middleware.ldap.jaas.JaasAuthenticator:176]</span> - Authentication succeeded for dn: uid=saml2-stefanl,ou=people,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.658 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:102]</span> - Looking up DN using userFilter<br/>
11:38:39.658 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:193]</span> - Search with the following parameters:<br/>
11:38:39.658 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:194]</span> - dn = ou=people,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.659 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:195]</span> - filter = uid={0}
<p style='margin-top:0;margin-bottom:10px;'>11:38:39.659 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:196]</span> - filterArgs = <span class="error">[saml2-stefanl]</span><br/>
11:38:39.659 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:197]</span> - searchControls = javax.naming.directory.SearchControls@8bf223<br/>
11:38:39.659 - DEBUG <span class="error">[edu.vt.middleware.ldap.auth.SearchDnResolver:198]</span> - handler = <span class="error">[edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@8e1dfb1]</span><br/>
11:38:39.661 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:223]</span> - Committed the following principals: [saml2-stefanl[]]<br/>
11:38:39.661 - DEBUG <span class="error">[edu.vt.middleware.ldap.jaas.LdapLoginModule:229]</span> - Committed the following roles: []<br/>
11:38:39.661 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178]</span> - Successfully authenticated user saml2-stefanl<br/>
11:38:39.661 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144]</span> - Returning control to authentication engine<br/>
11:38:39.662 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209]</span> - Processing incoming request<br/>
11:38:39.662 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514]</span> - Completing user authentication process<br/>
11:38:39.662 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585]</span> - Validating authentication was performed successfully<br/>
11:38:39.662 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:696]</span> - Updating session information for principal saml2-stefanl<br/>
11:38:39.663 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:560]</span> - User saml3-stefanl authenticated with method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<br/>
11:38:39.663 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161]</span> - Returning control to profile handler<br/>
11:38:39.663 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177]</span> - Redirecting user to profile handler at <a href="https://rnd-idp-01.sthlm.somewhere.com:443/idp/profile/SAML2/Redirect/SSO" class="external-link">https://rnd-idp-01.sthlm.somewhere.com:443/idp/profile/SAML2/Redirect/SSO</a><br/>
11:38:39.670 - INFO <span class="error">[Shibboleth-Access:73]</span> - 20130617T093839Z|10.2.3.21|rnd-idp-01.sthlm.somewhere.com:443|/profile/SAML2/Redirect/SSO|<br/>
11:38:39.670 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86]</span> - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<br/>
11:38:39.670 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97]</span> - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler<br/>
11:38:39.671 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:588]</span> - Unbinding LoginContext<br/>
11:38:39.671 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:614]</span> - Expiring LoginContext cookie<br/>
11:38:39.671 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:625]</span> - Removed LoginContext, with key a9ff0ee31e0578eabf1152d033764b72d0a1b5a72e81f3fecadbe222a4f398bb, from StorageService partition loginContexts<br/>
11:38:39.671 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:172]</span> - Incoming request contains a login context and indicates principal was authenticated, processing second leg of request<br/>
11:38:39.671 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.671 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167]</span> - Metadata document does not contain an EntityDescriptor with the ID stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.672 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167]</span> - Metadata document does not contain an EntityDescriptor with the ID stefan.next.dev.somewhere.com<br/>
11:38:39.673 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.673 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.673 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128]</span> - Looking up relying party configuration for stefan.next.dev.somewhere.com<br/>
11:38:39.673 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134]</span> - No custom relying party configuration found for stefan.next.dev.somewhere.com, looking up configuration based on metadata groups.<br/>
11:38:39.673 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.673 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.674 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167]</span> - Metadata document does not contain an EntityDescriptor with the ID stefan.next.dev.somewhere.com<br/>
11:38:39.674 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: stefan.next.dev.somewhere.com<br/>
11:38:39.674 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of stefan.next.dev.somewhere.com<br/>
11:38:39.674 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157]</span> - No custom or group-based relying party configuration found for stefan.next.dev.somewhere.com. Using default relying party configuration.<br/>
11:38:39.674 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253]</span> - Checking child metadata provider for entity descriptor with entity ID: <a href="https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth" class="external-link">https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth</a><br/>
11:38:39.674 - DEBUG <span class="error">[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520]</span> - Searching for entity descriptor with an entity ID of <a href="https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth" class="external-link">https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth</a><br/>
11:38:39.676 - DEBUG <span class="error">[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:99]</span> - Filtering peer endpoints. Supported peer endpoint bindings: <span class="error">[urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact]</span><br/>
11:38:39.676 - DEBUG <span class="error">[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69]</span> - Selecting endpoint by ACS URL 'https://stefan.next.dev.somewhere.com/pp/saml_login.cgi' and protocol binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' for request 'indohibfcbdimhpmmigdbokekcminmgdpedeidko' from entity 'stefan.next.dev.somewhere.com'<br/>
11:38:39.676 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:478]</span> - Resolving attributes for principal 'saml3-stefanl' for SAML request from relying party 'stefan.next.dev.somewhere.com'<br/>
11:38:39.676 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:119]</span> - shibboleth.AttributeResolver resolving attributes for principal saml3-stefanl<br/>
11:38:39.677 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:275]</span> - Specific attributes for principal saml3-stefanl were not requested, resolving all attributes.<br/>
11:38:39.677 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute homePostalAddress for principal saml3-stefanl<br/>
11:38:39.677 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:354]</span> - Resolving data connector myLDAP for principal saml3-stefanl<br/>
11:38:39.678 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:308]</span> - Search filter: (uid=saml3-stefanl)<br/>
11:38:39.678 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:363]</span> - LDAP data connector myLDAP - Retrieving attributes from LDAP<br/>
11:38:39.678 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74]</span> - Bind with the following parameters:<br/>
11:38:39.678 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75]</span> - authtype = simple<br/>
11:38:39.679 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76]</span> - dn = cn=admin,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.679 - DEBUG <span class="error">[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83]</span> - credential = <suppressed><br/>
11:38:39.680 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:193]</span> - Search with the following parameters:<br/>
11:38:39.681 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:194]</span> - dn = ou=people,dc=sthlm,dc=somewhere,dc=com<br/>
11:38:39.681 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:195]</span> - filter = (uid=saml3-stefanl)<br/>
11:38:39.681 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:196]</span> - filterArgs = []<br/>
11:38:39.681 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:197]</span> - searchControls = javax.naming.directory.SearchControls@4a744a4d<br/>
11:38:39.681 - DEBUG <span class="error">[edu.vt.middleware.ldap.Ldap:198]</span> - handler = <span class="error">[edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@5ba5ba75, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler@5d748654, edu.vt.middleware.ldap.handler.BinarySearchResultHandler@d1f24bb]</span><br/>
11:38:39.683 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: uid<span class="error">[saml3-stefanl]</span><br/>
11:38:39.683 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: mail<span class="error">[saml3.stefanl@somewhere.com]</span><br/>
11:38:39.683 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: sn<span class="error">[stefanl]</span><br/>
11:38:39.684 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: cn<span class="error">[saml3 stefanl]</span><br/>
11:38:39.684 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: street<span class="error">[street1street2]</span><br/>
11:38:39.684 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: userPassword<span class="error">[e01ENX04d25mY0dZZm1HR2tSc2xlejdneXpRPT0=]</span><br/>
11:38:39.684 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: entryDN<span class="error">[uid=saml3-stefanl,ou=people,dc=sthlm,dc=somewhere,dc=com]</span><br/>
11:38:39.685 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: objectClass<span class="error">[inetOrgPerson, top]</span><br/>
11:38:39.685 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414]</span> - LDAP data connector myLDAP - Found the following attribute: givenName<span class="error">[saml3]</span><br/>
11:38:39.685 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute homePostalAddress containing 0 values<br/>
11:38:39.685 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute organizationName for principal saml3-stefanl<br/>
11:38:39.685 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute organizationName containing 0 values<br/>
11:38:39.686 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute transientId for principal saml3-stefanl<br/>
11:38:39.686 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.TransientIdAttributeDefinition:97]</span> - Building transient ID for request indohibfcbdimhpmmigdbokekcminmgdpedeidko; outbound message issuer: <a href="https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth" class="external-link">https://rnd-idp-01.sthlm.somewhere.com/idp/shibboleth</a>, inbound message issuer: stefan.next.dev.somewhere.com, principal identifer: saml3-stefanl<br/>
11:38:39.686 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.TransientIdAttributeDefinition:115]</span> - Created transient ID _ab03759a8442bbc0081f4ecb51c27ed8 for request indohibfcbdimhpmmigdbokekcminmgdpedeidko<br/>
11:38:39.686 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute transientId containing 1 values<br/>
11:38:39.686 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute street for principal saml3-stefanl<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute street containing 1 values<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute surname for principal saml3-stefanl<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute surname containing 1 values<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute givenName for principal saml3-stefanl<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute givenName containing 1 values<br/>
11:38:39.687 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute homePhone for principal saml3-stefanl<br/>
11:38:39.688 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute homePhone containing 0 values<br/>
11:38:39.688 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute title for principal saml3-stefanl<br/>
11:38:39.688 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute title containing 0 values<br/>
11:38:39.688 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute postalCode for principal saml3-stefanl<br/>
11:38:39.688 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute postalCode containing 0 values<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute initials for principal saml3-stefanl<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute initials containing 0 values<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute email for principal saml3-stefanl<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute email containing 1 values<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute jpegPhoto for principal saml3-stefanl<br/>
11:38:39.689 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute jpegPhoto containing 0 values<br/>
11:38:39.690 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute telephoneNumber for principal saml3-stefanl<br/>
11:38:39.690 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute telephoneNumber containing 0 values<br/>
11:38:39.690 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute locality for principal saml3-stefanl<br/>
11:38:39.690 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute locality containing 0 values<br/>
11:38:39.690 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute stateProvince for principal saml3-stefanl<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute stateProvince containing 0 values<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute postalAddress for principal saml3-stefanl<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute postalAddress containing 0 values<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute postOfficeBox for principal saml3-stefanl<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute postOfficeBox containing 0 values<br/>
11:38:39.691 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute mobileNumber for principal saml3-stefanl<br/>
11:38:39.692 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute mobileNumber containing 0 values<br/>
11:38:39.692 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]</span> - Resolving attribute organizationalUnit for principal saml3-stefanl<br/>
11:38:39.692 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]</span> - Resolved attribute organizationalUnit containing 0 values<br/>
11:38:39.692 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute homePostalAddress from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.692 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute organizationName from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:468]</span> - Attribute transientId has 1 values after post-processing<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:468]</span> - Attribute street has 1 values after post-processing<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:468]</span> - Attribute surname has 1 values after post-processing<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:468]</span> - Attribute givenName has 1 values after post-processing<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute homePhone from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute title from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.693 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute postalCode from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute initials from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:468]</span> - Attribute email has 1 values after post-processing<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute jpegPhoto from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute telephoneNumber from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute postalAddress from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.694 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute stateProvince from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute locality from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute mobileNumber from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute postOfficeBox from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450]</span> - Removing attribute organizationalUnit from resolution result for principal saml3-stefanl. It contains no values.<br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:137]</span> - shibboleth.AttributeResolver resolved, for principal saml3-stefanl, the attributes: <span class="error">[transientId, street, surname, givenName, email]</span><br/>
11:38:39.695 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:71]</span> - shibboleth.AttributeFilterEngine filtering 5 attributes for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]</span> - Evaluating if filter policy releaseTransientIdToAnyone is active for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:139]</span> - Filter policy releaseTransientIdToAnyone is active for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute transientId for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]</span> - Evaluating if filter policy null is active for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:139]</span> - Filter policy null is active for principal saml3-stefanl<br/>
11:38:39.696 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute givenName for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute surname for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute email for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute mobileNumber for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute locality for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute stateProvince for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute postalCode for principal saml3-stefanl<br/>
11:38:39.697 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute postalAddress for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute telephoneNumber for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute street for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute organizationName for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute organizationalUnit for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:163]</span> - Processing permit value rule for attribute title for principal saml3-stefanl<br/>
11:38:39.698 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109]</span> - Attribute transientId has 1 values after filtering<br/>
11:38:39.699 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109]</span> - Attribute street has 1 values after filtering<br/>
11:38:39.699 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109]</span> - Attribute surname has 1 values after filtering<br/>
11:38:39.699 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109]</span> - Attribute givenName has 1 values after filtering<br/>
11:38:39.699 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109]</span> - Attribute email has 1 values after filtering<br/>
11:38:39.699 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:114]</span> - Filtered attributes for principal saml3-stefanl. The following attributes remain: <span class="error">[transientId, street, surname, givenName, email]</span><br/>
...</p>
<p style='margin-top:0;margin-bottom:10px;'>I should also point out that when rendering the login page this could be found:<br/>
11:38:28.653 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157]</span> - No custom or group-based relying party configuration found for stefan.next.dev.somewhere.com. Using default relying party configuration.<br/>
11:38:28.654 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:226]</span> - Creating login context and transferring control to authentication engine<br/>
11:38:28.657 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:181]</span> - Storing LoginContext to StorageService partition loginContexts, key a9ff0ee31e0578eabf1152d033764b72d0a1b5a72e81f3fecadbe222a4f398bb<br/>
11:38:28.657 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:240]</span> - Redirecting user to authentication engine at <a href="https://rnd-idp-01.sthlm.somewhere.com:443/idp/AuthnEngine" class="external-link">https://rnd-idp-01.sthlm.somewhere.com:443/idp/AuthnEngine</a><br/>
11:38:28.664 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209]</span> - Processing incoming request<br/>
11:38:28.664 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:240]</span> - Beginning user authentication process.<br/>
11:38:28.664 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:244]</span> - Existing IdP session available for principal saml3-stefanl<br/>
11:38:28.665 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:283]</span> - Filtering configured LoginHandlers: </p>
{urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler@686baa51}
<p style='margin-top:0;margin-bottom:10px;'>11:38:28.665 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:464]</span> - Selecting appropriate login handler from filtered set </p>
{urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler@686baa51}
<p style='margin-top:0;margin-bottom:10px;'>11:38:28.665 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:497]</span> - Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler<br/>
11:38:28.665 - DEBUG <span class="error">[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler:66]</span> - Redirecting to <a href="https://rnd-idp-01.sthlm.somewhere.com:443/idp/Authn/UserPassword" class="external-link">https://rnd-idp-01.sthlm.somewhere.com:443/idp/Authn/UserPassword</a></p>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Environment:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>Linux</p>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Project:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a style="color:#326ca6;" href="https://issues.shibboleth.net/jira/browse/SIDP">Shibboleth IdP 2 - Java</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Priority:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/priorities/major.png" height="16" width="16" border="0" align="absmiddle" alt="Major"> Major
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Reporter:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="stefanl@idp.protectnetwork.org" id="email_stefanl@idp.protectnetwork.org" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=stefanl%40idp.protectnetwork.org" style="color:#326ca6;">stefanl@idp.protectnetwork.org</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->