Trouble with attributes from IBM
Rob Whitener
rob.whitener at audaxhealth.com
Tue Jul 3 09:29:20 EDT 2012
Yes, we have an uncommented AttributeExtractor. But we also have an
AttributeResolver and AttributeFilter:
<!-- Map to extract attributes from SAML assertions. -->
<AttributeExtractor type="XML" validate="true"
path="attribute-map.xml"/>
<!-- Use a SAML query if no attributes are supplied during SSO. -->
<AttributeResolver type="Query" subjectMatch="true"/>
<!-- Default filtering policy for recognized attributes, lets other
data pass. -->
<AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>
I looked through the logs and didn't see any complaints around attribute
functionality. Actually there was no mention of AttributeExtractor,
Resolver, or Filter in the start up or shutdown logs. When I restart
shibd, should I also be restarting apache?
In terms of supported OS's, what flavors of Linux are supported?
On Tue, Jul 3, 2012 at 6:50 AM, Peter Schober <peter.schober at univie.ac.at>wrote:
> * Rob Whitener <rob.whitener at audaxhealth.com> [2012-07-03 00:39]:
> > 2012-07-02 22:33:05 WARN Shibboleth.SSO.SAML2 [5]: no AttributeExtractor
> > plugin installed, check log during startup
>
> Look for "AttributeExtractor" in shibboleth2.xml -- are there any, and
> are they uncommented?
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120703/4b2f2455/attachment.html
More information about the users
mailing list