Possible attribute problems when login

[Cantor, Scott]

On 8/19/12 9:07 AM, "Sergio Rivas" <srivasg_21 at hotmail.com> wrote:
>
>I'm using a User / Password authentication with an LDAP connector, and it
>seems to work as I can enter bad credentials and I'm not authorizated to
>access the service (i.e., the login form is showing). The problem is that
>I 
>always get this message when my user is correctly authenticated through
>Shibboleth login form:
>
>"We're sorry, but you cannot access this service at this time.

That¹s a result of substantial "extra" configuration on your part. That's
the example template for failing a check for required attributes, which
means you had to have added the sessionHook feature and the AttrChecker
handler and told it to look for some set of attributes.

If you did all that, and you're not releasing those attributes from the
IdP, then that's the result.

-- Scott