Trouble with attributes from IBM

[Rob Whitener]

This got me closer:

"You seem to be missing the Attribute/@id XML-attribute specifying "The
internal attribute ID to which this SAML attribute maps"
(shibboleth-2.0-attribute-map.xsd), which is also required by the
schema."

Now I no longer see the attribute format errors I was seeing, but I still
can't see my attributes when I go to the /Session page.  Also, in the logs
I see:

2012-07-02 22:33:05 WARN Shibboleth.SSO.SAML2 [5]: no AttributeExtractor
plugin installed, check log during startup
2012-07-02 22:33:05 DEBUG Shibboleth.SSO.SAML2 [5]: resolving attributes...
2012-07-02 22:33:05 DEBUG Shibboleth.AttributeResolver.Query [5]: found
AttributeStatement in input to new session, skipping query

Does this mean we have to have some other module enabled to actually deal
with the attributes that were found in the SAML message?

Thanks for your quick reply.


On Mon, Jul 2, 2012 at 6:20 PM, Peter Schober <peter.schober at univie.ac.at>wrote:

> * Rob Whitener <rob.whitener at audaxhealth.com> [2012-07-02 23:29]:
> > We have the attributes defined in attribute-map.xml like this:
> >
> >     <Attribute nameformat="urn:ibm:names:ITFIM:5.1:accessmanager"
> name="altId">
> >         <AttributeDecoder xsi:type="StringAttributeDecoder"
> caseSensitive="false"/>
> >     </Attribute>
>
> You seem to be missing the Attribute/@id XML-attribute specifying "The
> internal attribute ID to which this SAML attribute maps"
> (shibboleth-2.0-attribute-map.xsd), which is also required by the
> schema.
>
> > Also, we are running Shibboleth 2.3 on Ubuntu 10.04 LTS.
>
> I don't have any Ubuntu systems around currently but generally be sure
> to run something based on the Debian Backports, as these are more up
> to date.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120702/dcc61193/attachment-0001.html