Problem releasing uid attribute from IDP to SP

Armando Martins armando.mart1s at gmail.com
Tue Nov 26 09:14:39 EST 2013


Hello,

I'm really really new on shibboleth, and i've a little issue about
releasing the uid attribute to my SP.

Here is the thing i've all my attributes released to my SP except uid....

In my IDP logs i see this :

14:27:13.856 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:546]
- Removing attribute uid, it can not be encoded via
edu.internet2.middleware.shibboleth.common.attribute.encoding.SAML2NameIDEncoder

And in my SP logs :

2013-11-26 14:27:15 INFO Shibboleth.AttributeExtractor.XML [5]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:0.9.2342.19200300.100.1.1

I don't understand why i can't view my uid on Shibboleth.SSO/Session
SP's..... but i can view all my others attributes....

Here is my IDP attribute-resolver file about uid section:

<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid"
sourceAttributeID="uid">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:uid" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
    </resolver:AttributeDefinition>

IDP attribute filter about uid section:

<afp:AttributeRule attributeID="uid">
        <afp:PermitValueRule xsi:type="basic:ANY" />
    </afp:AttributeRule>

SP attribute map file about uid :

<Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="uid"/>

Thanks a lot for your help


-- 
Armando Martins
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131126/20868c2a/attachment.html 


More information about the users mailing list