nameID attribute not showing up in SP request

[Stein, Eric]

Okay, so the nameID is not present in the information shown by /Shibboleth.sso/Session. So I somehow screwed up the shibboleth configuration?

This is the relevant SAML snippet:
            <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">uid=XXXXX</saml:NameID>

In attribute-map.xml I added:
       <Attribute name="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName" id="nameid">
           <AttributeDecoder xsi:type="StringAttributeDecoder"/>
        </Attribute>

I modified shibboleth2.xml and added this to the <ApplicationDefaults tag:
        attributePrefix="AJP_"

Did I miss anything? There's nothing exciting that I see in the log files.

Thanks,
Eric

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, June 24, 2013 12:57 PM
To: Shib Users
Subject: Re: nameID attribute not showing up in SP request

On 6/24/13 12:23 PM, "Stein, Eric" <steine at locustec.com> wrote:

>  I added the variable to Apache's httpd.conf and httpd-ssl.conf:
>        JkEnvVar nameid undefined

I would guess that would override anything the SP sets, but I don't know for certain.

The rest is really as Peter said, getting ordinary variables to pass through requires prefixing them with AJP_, I think, per the page Peter mentioned.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net