can't attempt attribute query, either no NameID or no metadata to use

[Cantor, Scott]

On 10/30/13, 3:54 PM, "Mailvaganam, Hari" <hari.mailvaganam at ubc.ca> wrote:

>2013-10-29 21:14:34 WARN Shibboleth.AttributeResolver.Query [273358]:
>can't attempt attribute query, either no NameID or no metadata to use
>
>The above message occurs periodically.

It means there are no attributes provided by the IdP, and no NameID in the
assertion to query on (or alternatively no AttributeAuthority metadata to
use).

>The integration is direct SP-to-IdP SAML2 (no EDS or WAYF).

Doesn't matter.

>Any ideas on where to look? Filesystem/SAN seem fine (problems do not
>correlate to the SP message timeline).

Has nothing to do with performance or load and it's not an error.

>I have checked the mail-list archives ­ so fare none of those seem to fit
>but will keep digging.

There is only one set of explanations, in all cases, so all of them fit.

-- Scott