Attribute not resolving on SP

Stein, Eric steine at locustec.com
Thu Apr 18 12:26:16 EDT 2013


Thank you, Christopher, that sounds promising. My request definitely doesn't have that attribute, or any of the other Shibboleth attributes. I'm getting a 404 trying to visit the page you linked to, and I didn't see anything relevant on any of the five suggested pages. How do I configure HTTPD to add these values? This is my current httpd.conf:



#Shibboleth SP configuration

LoadModule mod_shib C:/shibboleth-sp/lib/shibboleth/mod_shib_22.so

UseCanonicalName On

<IfModule mod_alias.c>

  <Location /shibboleth-sp>

    Allow from all

  </Location>

  Alias /shibboleth-sp/main.css C:/shibboleth-sp/doc/shibboleth/main.css

</IfModule>

<Location /myapp1>

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  require valid-user

</Location>

<Location /myapp2>

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  require valid-user

</Location>

<Location /Shibboleth.sso>

  SetHandler shib

</Location>



-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Christopher Bongaarts
Sent: Thursday, April 18, 2013 12:16 PM
To: users at shibboleth.net
Subject: Re: Attribute not resolving on SP



On 4/18/2013 11:14 AM, Christopher Bongaarts wrote:

> On 4/18/2013 11:08 AM, Stein, Eric wrote:

>> Thanks for answering, Scott. If the SP has the attribute UID, how

>> does my application get access to that attribute?

>> httpRequest.getHeaderNames() also doesn't have a header named 'uid'.

>> What specific java call can I make so that my JSPs can see the UID?

>

> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttribute

> Access

>

>

> Examples at the bottom include Java...

>

> request.getAttribute("Shib-Identity-Provider")

>

> or in your case

>

> request.getAttribute("uid")

>



It occurs to me that if you're doing request.getAttributeNames and not seeing any of the Shib-related stuff (you should at a minimum be seeing Shib-Identity-Provider), you might not have configured your web server to apply Shib processing to your servlet URL...



--

%%  Christopher A. Bongaarts   %%  cab at umn.edu<mailto:cab at umn.edu>          %%

%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%

%%  University of Minnesota    %%  +1 (612) 625-1809    %%

--

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130418/dffb4efc/attachment-0001.html 


More information about the users mailing list