Problems extracting attributes

[Peter Schober]

* Rayene Ben Rayana <rayene.benrayana at gmail.com> [2013-02-04 13:10]:
> I have IDP log section showing the problem. The attributes are first
> resolved and then filtered and deleted.
> The log says that the filter policy corresponding to the SP is not active :
> 
> 10:17:47.653 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:122]
> - Evaluating if filter policy https://portailwifi.ec-nantes.fr/ is active
> for principal <hidden>
> 10:17:47.653 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:126]
> - Filter policy https://portailwifi.ec-nantes.fr/ is not active for
> principal <hidden>

Well, that's your answer then. I don't know what the policy looks like
and I cannot know how or why it does not behave as you expect.

Maybe someone confused the AttributeFilterPolicy's id with the
entityId of the SP (given that policies seem to have ids like
"https://portailwifi.ec-nantes.fr/") or forgot to update one value
after copy&paste. No way for me to know.

> I suspect that the IDP does not have the right metadata for the
> SP. The SP was in the "renater test federation" few days ago and
> than switched to the "renater production federation". Maybe the IDP
> continues to use the metadata from the test federation (?).

If there was no metadata for the SP the IDP would have logged that
during an attempt to access the SP (on WARN). If there is metadata and
it's available from multiple sources and the entity descriptors for
the same entityId are identical then it's immaterial where the
metadata came from.
If they do in fact differ (not a good idea to begin with, when they
have the same entityID), well, the current implementation uses the
first one found (i.e., from the first metadata provider configured).
But at this point I don't think this has anything to do with metadata.

The IdP is not releasing data because it has not been told to do so,
-peter