some problems about access control

[Cantor, Scott]

On 5/3/12 10:21 AM, "杨如鹏" <orbbyrp at gmail.com> wrote:

>I am new to shibboleth and trying to build a system with it. But I have
>some problems while it goes back to the protected location.

But you didn't say what the problems were.

> It seems that I have all the needed attributes in the sp point.

Use the /Shibboleth.sso/Session handler with showAttributeValues turned on
and you'll see exactly what it got.

> The AccessControl in my shibboleth2.xml is just like this.  There are no
>error or warn information in my log files in either the idp and the sp
>point.

Warnings and errors are not meant for routine system behavior. You should
react to anything in the log at that level. Access denial is not something
you can react to or fix, it's just a consequence of limiting access.

> Can you help me with it. I will really appreciate of your help.
>    <RequestMapper type="Native">
>        <RequestMap applicationId="default">
>            <Host name="example.com">

Your system is named example.com? I doubt it.

>   <Path name="test" authType="shibboleth"   requireSession="true">
>    <AccessControl>
>    <Rule require="idp:title">student</Rule>

It wouldn't be typical to use an attribute name of "idp:title", but it's
possible. That's actually the name you used? Not "title"?

-- Scott