Attribute not resolving on SP

[Stein, Eric]

Mrr? I thought those values were defined in attribute-map.xml. In attribute-map.xml, I have:

<Attribute name="urn:mace:dir:attribute-def:uid" id="uid">
    <AttributeDecoder xsi:type="StringAttributeDecoder"/>
</Attribute>

<Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">
    <AttributeDecoder xsi:type="StringAttributeDecoder"/>
</Attribute>

Are you saying I need to change shibboleth2.xml also? There are no attribute definitions in my shibboleth2.xml file...

Thanks,
Eric

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
Sent: Thursday, April 18, 2013 11:28 AM
To: Shib Users
Subject: Re: Attribute not resolving on SP

Does the SP understand name="urn:oid:0.9.2342.19200300.100.1.1"
It and uid are not defined in the default /etc/shibboleth/shibboleth2.xml


On 4/18/2013 10:13 AM, Stein, Eric wrote:
> Possibly, but I don't think that's it. From attribute-resolver.xml:
>
> <resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="my_user_name">
>
>      <resolver:Dependency ref="ATTRIBUTE_DATA_CONNECTOR" />
>
>      <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" />
>
>      <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
>
> </resolver:AttributeDefinition>
>
> I don't know why it's coming out of AACLI in caps, but I don't know what I could have done to change the lowercase f to a capital F.
>
> Thanks for the idea, though!
>
> Eric
>
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
> Sent: Thursday, April 18, 2013 11:07 AM
> To: users at shibboleth.net
> Subject: Re: Attribute not resolving on SP
>
> Should FriendlyName be friendlyName?
>
> On 4/18/2013 9:43 AM, Stein, Eric wrote:
>
>  > Hey,
>
>  >
>
>  >    I've got an attribute I'm exporting from my Shibboleth IdP. AACLI shows it as:
>
>  >
>
>  > <?xml version="1.0" encoding="UTF-8"?>
>
>  >
>
>  > <saml2:AttributeStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
>
>  >
>
>  >      <saml2:Attribute FriendlyName="uid"
>
>  >
>
>  >                       Name="urn:oid:0.9.2342.19200300.100.1.1"
>
>  >
>
>  >                       NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>
>  >
>
>  >          <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
>
>  >
>
>  >                                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
>
>  >
>
>  >              STEINE
>
>  >
>
>  >          </saml2:AttributeValue>
>
>  >
>
>  >     </saml2:Attribute>
>
>  >
>
>  > </saml2:AttributeStatement>
>
>  >
>
>  > Unfortunately, my Shibboleth SP (Apache HTTPD) is not finding it. The transactions.log file shows the attributes as being added:
>
>  >
>
>  > 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: Cached the following attributes with session (ID: ***) for (applicationId: default) {
>
>  >
>
>  > 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: uid (1 values)
>
>  >
>
>  > 2013-04-18 07:24:43 INFO Shibboleth-TRANSACTION [1]: }
>
>  >
>
>  > But when my protected java application prints out attributes, I don't see it. I'm printing out
>
>  >
>
>  > servletContext.getAttributeNames()
>
>  >
>
>  > request.getAttributeNames()
>
>  >
>
>  > httpSession.getAttributeNames()
>
>  >
>
>  > Also, I'm running FireBug and that doesn't see a UID.
>
>  >
>
>  > I did configure attribute-map.xml:
>
>  >
>
>  > <Attribute name="urn:mace:dir:attribute-def:uid" id="uid">
>
>  >
>
>  >      <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
>  >
>
>  > </Attribute>
>
>  >
>
>  > <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid">
>
>  >
>
>  >      <AttributeDecoder xsi:type="StringAttributeDecoder"/>
>
>  >
>
>  > </Attribute>
>
>  >
>
>  > Does anybody know what might be going wrong? Maybe I'm just looking for it in the wrong places?
>
>  >
>
>  > Thanks,
>
>  >
>
>  > Eric
>
>  >
>
>  >
>
>  >
>
>  > --
>
>  > To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>
>
>  >
>
> --
>
>    Douglas E. Engert  <DEEngert at anl.gov <mailto:DEEngert at anl.gov>>
>
>    Argonne National Laboratory
>
>    9700 South Cass Avenue
>
>    Argonne, Illinois  60439
>
>    (630) 252-5444
>
> --
>
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net