Help- Attribute is null in request header during

[Milan Ashara]

This issue is solved after providing access rights to attribute-map.xml

Thanks
Milan D Ashara


> Message: 3
> Date: Thu, 4 Oct 2012 11:50:16 -0400 (EDT)
> From: "Kevin P. Foote" <kpfoote at iup.edu>
> Subject: Re: Help- Attribute is null in request header during
> authorization (Peter Schober)
> To: Shib Users <users at shibboleth.net>
> Message-ID: <alpine.LFD.2.02.1210041131350.5466 at denali.cc.iup.edu>
> Content-Type: TEXT/PLAIN; charset=US-ASCII
>
>
> If the file can not be accessed it has to do with your permissions.
>
> If your SP is windows you will have to verify that your permissions are 
> set
> correct. I get lost in windows permissions.. but a default install of
> latest 2.5.0 seems to work fine.
>
> I've never had an issue with the linux variant of the SP.. but
> I'd also verify that whoever is running the shibd process has access to
> the attribute-map.xml file ... and that entire directory as well.
>
> The latest SP on linux runs under non root uid so that user (shibd)
> would need to have the access.
>
> ------
> thanks
>  kevin.foote
>
> On Thu, 4 Oct 2012, Milan Ashara wrote:
>
> -> Hello peter,
> ->
> ->     Thanks for your help.
> ->
> ->     We  have found that we are getting "unable to access local file
> -> /etc/shibboleth/attribute-map.xml" in shibd_warn.log.
> ->
> ->     yes We have set up the Shibboleth SP in front of your Java Servlet
> -> container.
> ->
> ->     No there is no attributes in the Shibboleth SP (transaction.log).
> ->
> -> Thanks
> -> Milan D Ashara
> -> >
> -> > Message: 2
> -> > Date: Wed, 3 Oct 2012 18:14:19 +0200
> -> > From: Peter Schober <peter.schober at univie.ac.at>
> -> > Subject: Re: Help- Attribute is null in request header during
> -> > authorization
> -> > To: users at shibboleth.net
> -> > Message-ID: <20121003161419.GA9371 at aco.net>
> -> > Content-Type: text/plain; charset=us-ascii
> -> >
> -> > * Milan Ashara <milan.ashara at spec-india.com> [2012-10-03 16:40]:
> -> >> After IDP Authenticate user, it redirects to URL. where I have used
> -> >> filter in java to authorize user. I am not getting any attribute
> -> >> header / cookie (UID is null)  from which I authorize user.
> -> >
> -> > Don't keep others guessing when you want them to solve your problem.
> -> >
> -> > What does "redirects to URL" and "I have used filter in java" mean,
> -> > exactly? Who/what is doing the redirect? Shibboleth or your own code?
> -> > Did you set up the Shibboleth SP in front of your Java Servlet
> -> > container, as described in the documentation? Using mod_proxy_ajp?
> -> > Are the attributes there in the Shibboleth SP (transaction.log)?
> -> > -peter
> ->
> -> > ------------------------------
> ->
> ->
> -> --
> -> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> ->
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 4 Oct 2012 11:55:41 -0400 (EDT)
> From: "Kevin P. Foote" <kpfoote at iup.edu>
> Subject: Re: Help- Attribute is null in request header during
> authorization
> To: Shib Users <users at shibboleth.net>
> Message-ID: <alpine.LFD.2.02.1210041151410.5466 at denali.cc.iup.edu>
> Content-Type: TEXT/PLAIN; charset=US-ASCII
>
>
> -> The latest SP on linux runs under non root uid so that user (shibd)
> -> would need to have the access.
>
> OOPS.. I'm correcting myself.. shibd user should already have read
> access file is 0644 :-)  still owned by root.
>
>
> ------
> thanks
>  kevin.foote
>
> On Thu, 4 Oct 2012, Kevin P. Foote wrote:
>
> ->
> -> If the file can not be accessed it has to do with your permissions.
> ->
> -> If your SP is windows you will have to verify that your permissions are 
> set
> -> correct. I get lost in windows permissions.. but a default install of
> -> latest 2.5.0 seems to work fine.
> ->
> -> I've never had an issue with the linux variant of the SP.. but
> -> I'd also verify that whoever is running the shibd process has access to
> -> the attribute-map.xml file ... and that entire directory as well.
> ->
> -> The latest SP on linux runs under non root uid so that user (shibd)
> -> would need to have the access.
> ->
> -> ------
> -> thanks
> ->   kevin.foote
> ->
> -> On Thu, 4 Oct 2012, Milan Ashara wrote:
> ->
> -> -> Hello peter,
> -> ->
> -> ->     Thanks for your help.
> -> ->
> -> ->     We  have found that we are getting "unable to access local file
> -> -> /etc/shibboleth/attribute-map.xml" in shibd_warn.log.
> -> ->
> -> ->     yes We have set up the Shibboleth SP in front of your Java 
> Servlet
> -> -> container.
> -> ->
> -> ->     No there is no attributes in the Shibboleth SP 
> (transaction.log).
> -> ->
> -> -> Thanks
> -> -> Milan D Ashara
> -> -> >
> -> -> > Message: 2
> -> -> > Date: Wed, 3 Oct 2012 18:14:19 +0200
> -> -> > From: Peter Schober <peter.schober at univie.ac.at>
> -> -> > Subject: Re: Help- Attribute is null in request header during
> -> -> > authorization
> -> -> > To: users at shibboleth.net
> -> -> > Message-ID: <20121003161419.GA9371 at aco.net>
> -> -> > Content-Type: text/plain; charset=us-ascii
> -> -> >
> -> -> > * Milan Ashara <milan.ashara at spec-india.com> [2012-10-03 16:40]:
> -> -> >> After IDP Authenticate user, it redirects to URL. where I have 
> used
> -> -> >> filter in java to authorize user. I am not getting any attribute
> -> -> >> header / cookie (UID is null)  from which I authorize user.
> -> -> >
> -> -> > Don't keep others guessing when you want them to solve your 
> problem.
> -> -> >
> -> -> > What does "redirects to URL" and "I have used filter in java" 
> mean,
> -> -> > exactly? Who/what is doing the redirect? Shibboleth or your own 
> code?
> -> -> > Did you set up the Shibboleth SP in front of your Java Servlet
> -> -> > container, as described in the documentation? Using mod_proxy_ajp?
> -> -> > Are the attributes there in the Shibboleth SP (transaction.log)?
> -> -> > -peter
> -> ->
> -> -> > ------------------------------
> -> ->
> -> ->
> -> -> --
> -> -> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> -> ->
> -> --
> -> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> ->
>
>
> ------------------------------
>

> *************************************