Problem releasing uid attribute from IDP to SP
Armando Martins
armando.mart1s at gmail.com
Tue Nov 26 09:14:39 EST 2013
Hello,
I'm really really new on shibboleth, and i've a little issue about
releasing the uid attribute to my SP.
Here is the thing i've all my attributes released to my SP except uid....
In my IDP logs i see this :
14:27:13.856 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:546]
- Removing attribute uid, it can not be encoded via
edu.internet2.middleware.shibboleth.common.attribute.encoding.SAML2NameIDEncoder
And in my SP logs :
2013-11-26 14:27:15 INFO Shibboleth.AttributeExtractor.XML [5]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:0.9.2342.19200300.100.1.1
I don't understand why i can't view my uid on Shibboleth.SSO/Session
SP's..... but i can view all my others attributes....
Here is my IDP attribute-resolver file about uid section:
<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid"
sourceAttributeID="uid">
<resolver:Dependency ref="myLDAP" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:uid" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
</resolver:AttributeDefinition>
IDP attribute filter about uid section:
<afp:AttributeRule attributeID="uid">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
SP attribute map file about uid :
<Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="uid"/>
Thanks a lot for your help
--
Armando Martins
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131126/20868c2a/attachment.html
More information about the users
mailing list