Attribute not resolving on SP
Stein, Eric
steine at locustec.com
Thu Apr 18 11:13:18 EDT 2013
Possibly, but I don't think that's it. From attribute-resolver.xml:
<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="my_user_name">
<resolver:Dependency ref="ATTRIBUTE_DATA_CONNECTOR" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
</resolver:AttributeDefinition>
I don't know why it's coming out of AACLI in caps, but I don't know what I could have done to change the lowercase f to a capital F.
Thanks for the idea, though!
Eric
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
Sent: Thursday, April 18, 2013 11:07 AM
To: users at shibboleth.net
Subject: Re: Attribute not resolving on SP
Should FriendlyName be friendlyName?
On 4/18/2013 9:43 AM, Stein, Eric wrote:
> Hey,
>
> I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:
>
> <?xml version="1.0" encoding="UTF-8"?>
>
> <saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
>
> <saml2:Attribute FriendlyName="uid"
>
> Name="urn:oid:0.9.2342.19200300.100.1.1"
>
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>
> <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
>
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
>
> STEINE
>
> </saml2:AttributeValue>
>
> </saml2:Attribute>
>
> </saml2:AttributeStatement>
>
> Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)
>
> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }
>
> But when my protected java application prints out attributes, I don't see it. I'm printing out
>
> servletContext.getAttributeNames()
>
> request.getAttributeNames()
>
> httpSession.getAttributeNames()
>
> Also, I'm running FireBug and that doesn't see a UID.
>
> I did configure attribute-map.xml:
>
> <Attribute name="urn:mace:dir:attribute-def:uid" id="uid">
>
> <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
> </Attribute>
>
> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">
>
> <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
> </Attribute>
>
> Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?
>
> Thanks,
>
> Eric
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
>
--
Douglas E. Engert <DEEngert at anl.gov<mailto:DEEngert at anl.gov>>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130418/cda30254/attachment-0001.html
More information about the users
mailing list