Specific attributes for principal null were not requested

It Meme it.meme01 at gmail.com
Wed Sep 12 16:18:54 EDT 2012


Apologies to bombard the list.

We have 5 instances of the IdP running - we dod not cluster sessions
and have a load balancer in front.

Will this have an impact - we do not have any clients using SAML1 so I
am assuming this should not matter?

On Wed, Sep 12, 2012 at 1:15 PM, It Meme <it.meme01 at gmail.com> wrote:
> After delving further into the logs, it looks like it is impacting all
> of the SPs - however only some of the authentications and not all.
>
> Our IdP is v2.2 - not sure if that has bearing.
>
> Can anyone help point in right directions?
>
>
> On Wed, Sep 12, 2012 at 12:56 PM, It Meme <it.meme01 at gmail.com> wrote:
>> Hi List:
>>
>> We have over 50 SPs integrated with our IdP.
>>
>> One of our SPs is generating the IdP log messages listed below - the
>> user authenticates but for reasons unknown does not generate any
>> attributes.
>>
>> It is impacting only some users authenticating to the SP (the SP is
>> load balanced so I have focused on if there is configuration
>> difference between the two load balanced instance but looks okay so
>> far).
>>
>> Any ideas on where I should focus my troubleshooting attention? Thanks.
>>
>>
>> 21:38:55.207 - DEBUG
>> [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:458]
>> - Resolving attributes for principal 'null' for SAML request from
>> relying party 'https://example.edu/shibboleth-sp'
>> 21:38:55.207 - DEBUG
>> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:118]
>> - shibboleth.AttributeResolver resolving attributes for principal null
>> 21:38:55.207 - DEBUG
>> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:249]
>> - Specific attributes for principal null were not requested, resolving
>> all attributes.
>> 21:38:55.207 - DEBUG
>> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:285]
>> - Resolving attribute eduPersonPrincipalName for principal null


More information about the users mailing list