Attribute not resolving on SP
Stein, Eric
steine at locustec.com
Thu Apr 18 10:43:46 EDT 2013
Hey,
I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:
<?xml version="1.0" encoding="UTF-8"?>
<saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
<saml2:Attribute FriendlyName="uid"
Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
STEINE
</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:
2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {
2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)
2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }
But when my protected java application prints out attributes, I don't see it. I'm printing out
servletContext.getAttributeNames()
request.getAttributeNames()
httpSession.getAttributeNames()
Also, I'm running FireBug and that doesn't see a UID.
I did configure attribute-map.xml:
<Attribute name="urn:mace:dir:attribute-def:uid" id="uid">
<AttributeDecoder xsi:type="StringAttributeDecoder"/>
</Attribute>
<Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">
<AttributeDecoder xsi:type="StringAttributeDecoder"/>
</Attribute>
Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?
Thanks,
Eric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130418/d6a65a3c/attachment.html
More information about the users
mailing list