Help- Attribute is null in request header during authorization

Kevin P. Foote kpfoote at iup.edu
Thu Oct 4 11:55:41 EDT 2012


-> The latest SP on linux runs under non root uid so that user (shibd)
-> would need to have the access. 

OOPS.. I'm correcting myself.. shibd user should already have read
access file is 0644 :-)  still owned by root.


------
thanks
  kevin.foote

On Thu, 4 Oct 2012, Kevin P. Foote wrote:

-> 
-> If the file can not be accessed it has to do with your permissions. 
-> 
-> If your SP is windows you will have to verify that your permissions are set 
-> correct. I get lost in windows permissions.. but a default install of
-> latest 2.5.0 seems to work fine.
-> 
-> I've never had an issue with the linux variant of the SP.. but
-> I'd also verify that whoever is running the shibd process has access to
-> the attribute-map.xml file ... and that entire directory as well.
-> 
-> The latest SP on linux runs under non root uid so that user (shibd)
-> would need to have the access. 
-> 
-> ------
-> thanks
->   kevin.foote
-> 
-> On Thu, 4 Oct 2012, Milan Ashara wrote:
-> 
-> -> Hello peter,
-> -> 
-> ->     Thanks for your help.
-> -> 
-> ->     We  have found that we are getting "unable to access local file 
-> -> /etc/shibboleth/attribute-map.xml" in shibd_warn.log.
-> -> 
-> ->     yes We have set up the Shibboleth SP in front of your Java Servlet 
-> -> container.
-> -> 
-> ->     No there is no attributes in the Shibboleth SP (transaction.log).
-> -> 
-> -> Thanks
-> -> Milan D Ashara
-> -> >
-> -> > Message: 2
-> -> > Date: Wed, 3 Oct 2012 18:14:19 +0200
-> -> > From: Peter Schober <peter.schober at univie.ac.at>
-> -> > Subject: Re: Help- Attribute is null in request header during
-> -> > authorization
-> -> > To: users at shibboleth.net
-> -> > Message-ID: <20121003161419.GA9371 at aco.net>
-> -> > Content-Type: text/plain; charset=us-ascii
-> -> >
-> -> > * Milan Ashara <milan.ashara at spec-india.com> [2012-10-03 16:40]:
-> -> >> After IDP Authenticate user, it redirects to URL. where I have used
-> -> >> filter in java to authorize user. I am not getting any attribute
-> -> >> header / cookie (UID is null)  from which I authorize user.
-> -> >
-> -> > Don't keep others guessing when you want them to solve your problem.
-> -> >
-> -> > What does "redirects to URL" and "I have used filter in java" mean,
-> -> > exactly? Who/what is doing the redirect? Shibboleth or your own code?
-> -> > Did you set up the Shibboleth SP in front of your Java Servlet
-> -> > container, as described in the documentation? Using mod_proxy_ajp?
-> -> > Are the attributes there in the Shibboleth SP (transaction.log)?
-> -> > -peter
-> -> 
-> -> > ------------------------------
-> ->  
-> -> 
-> -> --
-> -> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-> -> 
-> --
-> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-> 


More information about the users mailing list