Attribute not resolving on SP

Stein, Eric steine at locustec.com
Thu Apr 18 10:43:46 EDT 2013


Hey,

  I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:



<?xml version="1.0" encoding="UTF-8"?>

<saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">

    <saml2:Attribute FriendlyName="uid"

                     Name="urn:oid:0.9.2342.19200300.100.1.1"

                     NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

        <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"

                              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">

            STEINE

        </saml2:AttributeValue>

   </saml2:Attribute>

</saml2:AttributeStatement>



Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:



2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {

2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)

2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }



But when my protected java application prints out attributes, I don't see it. I'm printing out



servletContext.getAttributeNames()

request.getAttributeNames()

httpSession.getAttributeNames()



Also, I'm running FireBug and that doesn't see a UID.



I did configure attribute-map.xml:



<Attribute name="urn:mace:dir:attribute-def:uid" id="uid">

    <AttributeDecoder xsi:type="StringAttributeDecoder"/>

</Attribute>



<Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">

    <AttributeDecoder xsi:type="StringAttributeDecoder"/>

</Attribute>



Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?

Thanks,

Eric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130418/d6a65a3c/attachment.html 


More information about the users mailing list