Warnung Shibboleth.PropertySet : load() skipping duplicate property set:
Rainer Hoerbe
rainer at hoerbe.at
Mon Aug 20 11:42:21 EDT 2012
When restarting shibd (2.5.0) I am encountering this warning:
"Shibboleth.PropertySet : load() skipping duplicate property set: {urn:eu:stork:names:tc:STORK:1.0:assertion}RequestedAttribute"
The session initiator looks like this:
<SessionInitiator type="SAML2" Location="/Login" forceAuthn="true" isPassive="false">
<samlp:AuthnRequest
xmlns:stork="urn:eu:stork:names:tc:STORK:1.0:assertion"
xmlns:storkp="urn:eu:stork:names:tc:STORK:1.0:protocol"
ID="_Meaningslessstring4xmlvalidatioN" IssueInstant="1900-01-01T00:00:00Z" Version="2.0">
<samlp:Extensions>
<storkp:RequestedAttributes>
<stork:RequestedAttribute Name="http://www.stork.gov.eu/1.0/eIdentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<stork:RequestedAttribute Name="http://www.stork.gov.eu/1.0/givenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
</storkp:RequestedAttributes>
</samlp:Extensions>
</samlp:AuthnRequest>
If I remove one of the 2 stork:RequestedAttribute elements, the warning goes away. It does, however, produce the expected AuthnRequest. Is this anything to worry about?
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samlecho2.hoerbe.at/Shibboleth.sso/SAML2/POST" Destination="https://testshib.portalverbund.at/idp/profile/SAML2/Redirect/SSO" ID="_72e257e2a91281678e46f864b6766686" IssueInstant="2012-08-20T15:33:52Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" xmlns:stork="urn:eu:stork:names:tc:STORK:1.0:assertion" xmlns:storkp="urn:eu:stork:names:tc:STORK:1.0:protocol">
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samlecho2.hoerbe.at/shibboleth</saml:Issuer>
<samlp:Extensions>
<storkp:RequestedAttributes xmlns:storkp="urn:eu:stork:names:tc:STORK:1.0:protocol">
<stork:RequestedAttribute Name="http://www.stork.gov.eu/1.0/eIdentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:stork="urn:eu:stork:names:tc:STORK:1.0:assertion"/>
<stork:RequestedAttribute Name="http://www.stork.gov.eu/1.0/givenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:stork="urn:eu:stork:names:tc:STORK:1.0:assertion"/>
</storkp:RequestedAttributes>
</samlp:Extensions>
<samlp:NameIDPolicy AllowCreate="1"/>
</samlp:AuthnRequest>
Any opinion?
Thanks, Rainer
More information about the users
mailing list