Attribute resolver dependency question/issue
Tom Poage
tfpoage at ucdavis.edu
Mon May 7 18:47:49 BST 2012
Debug trace. Why would eduPersonAffiliation not be cached?
Does the attribute filter operate on the cached LDAP data, so if I
filter it out in attribute-filter.xml, it's gone 'forever'?
Thanks.
Tom.
> 10:21:34.954 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:308] - Search filter: (uid=poage)
> 10:21:34.956 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:344] - LDAP data connector ucdLDAP - Checking cache for search results
> 10:21:34.958 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:351] - LDAP data connector ucdLDAP - No results cached for search filter '(uid=poage)'
> 10:21:34.958 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:363] - LDAP data connector ucdLDAP - Retrieving attributes from LDAP
> 10:21:35.129 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414] - LDAP data connector ucdLDAP - Found the following attribute: eduPersonAffiliation[external]
...
> 10:22:16.179 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:344] - LDAP data connector ucdLDAP - Checking cache for search results
> 10:22:16.180 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:347] - LDAP data connector ucdLDAP - Returning attributes from cache
> 10:22:16.182 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314] - Resolving attribute eduPersonAffiliation for principal poage
> 10:22:16.188 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336] - Resolved attribute eduPersonAffiliation containing 0 values
> <!-- Filter out non-standard attribute values -->
> <afp:AttributeFilterPolicy id="noRelease">
> <afp:PolicyRequirementRule xsi:type="basic:ANY" />
> <afp:AttributeRule attributeID="eduPersonScopedAffiliation">
> <afp:DenyValueRule xsi:type="basic:AttributeValueString" value="external at ucdavis.edu" ignoreCase="true" />
> </afp:AttributeRule>
> <afp:AttributeRule attributeID="eduPersonAffiliation">
> <afp:DenyValueRule xsi:type="basic:AttributeValueString" value="external" ignoreCase="true" />
> </afp:AttributeRule>
> </afp:AttributeFilterPolicy>
More information about the users
mailing list