can't attempt attribute query, either no NameID or no metadata to use

[Chris Phillips]

Hari,

Is there a single IdP instance or multiple IdP instances that are behind a
load balancer for your IdP?

If it's periodical against a multi machine configuration it's possible
that it's limited to a single node in the configuration. It's the classic
approach of isolating pieces at a time (quiesce a node, does it still
happen? etc) to see if you can narrow the field down to isolate where the
issue occurs.


Chris.


On 13-10-30 4:10 PM, "Mailvaganam, Hari" <hari.mailvaganam at ubc.ca> wrote:

>Thanks Scott.
>
>>It means there are no attributes provided by the IdP, and no NameID in
>>the
>assertion to query on (or alternatively no AttributeAuthority metadata to
>use).
>
>It occurs periodically - could it be tied to performance?
>
>
>
>
>-----Original Message-----
>From: <Cantor>, Scott <cantor.2 at osu.edu>
>Reply-To: Shib Users <users at shibboleth.net>
>Date: Wednesday, 30 October, 2013 1:01 PM
>To: Shib Users <users at shibboleth.net>
>Subject: Re: can't attempt attribute query, either no NameID or no
>metadata	to use
>
>>On 10/30/13, 3:54 PM, "Mailvaganam, Hari" <hari.mailvaganam at ubc.ca>
>>wrote:
>>
>>>2013-10-29 21:14:34 WARN Shibboleth.AttributeResolver.Query [273358]:
>>>can't attempt attribute query, either no NameID or no metadata to use
>>>
>>>The above message occurs periodically.
>>
>>It means there are no attributes provided by the IdP, and no NameID in
>>the
>>assertion to query on (or alternatively no AttributeAuthority metadata to
>>use).
>>
>>>The integration is direct SP-to-IdP SAML2 (no EDS or WAYF).
>>
>>Doesn't matter.
>>
>>>Any ideas on where to look? Filesystem/SAN seem fine (problems do not
>>>correlate to the SP message timeline).
>>
>>Has nothing to do with performance or load and it's not an error.
>>
>>>I have checked the mail-list archives ­ so fare none of those seem to
>>>fit
>>>but will keep digging.
>>
>>There is only one set of explanations, in all cases, so all of them fit.
>>
>>-- Scott
>>
>>
>>--
>>To unsubscribe from this list send an email to
>>users-unsubscribe at shibboleth.net
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net