Attribute not resolving on SP

Douglas E. Engert deengert at anl.gov
Thu Apr 18 11:07:00 EDT 2013


Should FriendlyName be friendlyName?

On 4/18/2013 9:43 AM, Stein, Eric wrote:
> Hey,
>
>    I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:
>
> <?xml version="1.0" encoding="UTF-8"?>
>
> <saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
>
>      <saml2:Attribute FriendlyName="uid"
>
>                       Name="urn:oid:0.9.2342.19200300.100.1.1"
>
>                       NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>
>          <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
>
>                                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
>
>              STEINE
>
>          </saml2:AttributeValue>
>
>     </saml2:Attribute>
>
> </saml2:AttributeStatement>
>
> Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }
>
> But when my protected java application prints out attributes, I don't see it. I'm printing out
>
> servletContext.getAttributeNames()
>
> request.getAttributeNames()
>
> httpSession.getAttributeNames()
>
> Also, I'm running FireBug and that doesn't see a UID.
>
> I did configure attribute-map.xml:
>
> <Attribute name="urn:mace:dir:attribute-def:uid" id="uid">
>
>      <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
> </Attribute>
>
> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">
>
>      <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
> </Attribute>
>
> Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?
>
> Thanks,
>
> Eric
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444


More information about the users mailing list