employeeNumber attribute

[Christopher J. Bottaro]

On Tue, Sep 11, 2012 at 12:41 PM, Christopher Bongaarts <cab at umn.edu> wrote:
>
>
> urn:oid:0.9.2342.19200300.100.1.1 is the SAML 2 name for "uid".  I think
> employeeNumber is represented as "urn:oid:2.16.840.1.113730.3.1.3" (at
> least that's what we use).
>
> > Also, employeeNumber is nowhere to be seen in the logs.
>
> Unless they are passing it in the uid field you're not mapping.
>
> You might find it helpful as well to hit /Shibboleth.sso/Session after
> logging in, to see what attributes were received (and you can tweak
> shibboleth2.xml to show the values instead of a count if you want).
>

The "Attributes" section on the "/Shibboleth.sso/Session" page is
completely blank.

On Tue, Sep 11, 2012 at 1:10 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> Try the tran log.
>

It shows nothing:

$ tail /usr/local/shibboleth-2.4.3/var/log/shibboleth/transaction.log -n 100
2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: New session (ID:
_ba8fd813e8ada4f1812fd66f210983b1) with (applicationId: fresnostate) for
principal from (IdP: https://shib-idp.its.csufresno.edu/idp/shibboleth) at
(ClientAddress: 74.61.73.193) with (NameIdentifier:
_1b4d5af7d1fe3ab5609832ebb69ad42a) using (Protocol:
urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID:
_2c56db141764ed9b43ecacf7da1fc00e)
2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: Cached the following
attributes with session (ID: _ba8fd813e8ada4f1812fd66f210983b1) for
(applicationId: fresnostate) {
2012-09-11 17:25:38 INFO Shibboleth-TRANSACTION [2]: }

Maybe I need to turn up the log level to debug?  What setting is that in
"shibd.logger"?

Thanks again.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120911/811e8464/attachment.html