Attribute not resolving on SP

Stein, Eric steine at locustec.com
Thu Apr 18 11:13:18 EDT 2013


Possibly, but I don't think that's it. From attribute-resolver.xml:



<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="my_user_name">

    <resolver:Dependency ref="ATTRIBUTE_DATA_CONNECTOR" />

    <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" />

    <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />

</resolver:AttributeDefinition>



I don't know why it's coming out of AACLI in caps, but I don't know what I could have done to change the lowercase f to a capital F.



Thanks for the idea, though!

Eric



-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
Sent: Thursday, April 18, 2013 11:07 AM
To: users at shibboleth.net
Subject: Re: Attribute not resolving on SP



Should FriendlyName be friendlyName?



On 4/18/2013 9:43 AM, Stein, Eric wrote:

> Hey,

>

>    I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:

>

> <?xml version="1.0" encoding="UTF-8"?>

>

> <saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">

>

>      <saml2:Attribute FriendlyName="uid"

>

>                       Name="urn:oid:0.9.2342.19200300.100.1.1"

>

>                       NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

>

>          <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"

>

>                                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">

>

>              STEINE

>

>          </saml2:AttributeValue>

>

>     </saml2:Attribute>

>

> </saml2:AttributeStatement>

>

> Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:

>

> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {

>

> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)

>

> 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }

>

> But when my protected java application prints out attributes, I don't see it. I'm printing out

>

> servletContext.getAttributeNames()

>

> request.getAttributeNames()

>

> httpSession.getAttributeNames()

>

> Also, I'm running FireBug and that doesn't see a UID.

>

> I did configure attribute-map.xml:

>

> <Attribute name="urn:mace:dir:attribute-def:uid" id="uid">

>

>      <AttributeDecoder xsi:type="StringAttributeDecoder"/>

>

> </Attribute>

>

> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">

>

>      <AttributeDecoder xsi:type="StringAttributeDecoder"/>

>

> </Attribute>

>

> Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?

>

> Thanks,

>

> Eric

>

>

>

> --

> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

>



--



  Douglas E. Engert  <DEEngert at anl.gov<mailto:DEEngert at anl.gov>>

  Argonne National Laboratory

  9700 South Cass Avenue

  Argonne, Illinois  60439

  (630) 252-5444

--

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130418/cda30254/attachment-0001.html 


More information about the users mailing list