Attribute not sending to new SP

Christopher Bongaarts cab at umn.edu
Mon Sep 30 11:06:42 EDT 2013


On 9/30/2013 9:49 AM, David Perry wrote:
>
> Hi there
>
> I've setup a new (2.5.2) Service Provider under Server 2008 / IIS 7.5. 
> The basics are tested, and I've setup the following attribute-filter 
> definition (the same as it was for our old 2.4.2 SP, but with the 
> requesterString updated):
>
>
> However, 2.5.2 doesn't want to interpret the ORGDN bit (EPPN is coming 
> through fine, to HTTP_EPPN if I run a PHP script to spit out all the 
> $_SERVER headers) even though it acknowledges there is an attribute -- 
> but it doesn't like that attribute, so here's a cranked up DEBUG 
> including the (decoded) assertion:
>
> 2013-09-30 15:32:25 INFO Shibboleth.AttributeExtractor.XML [2]: 
> skipping unmapped SAML 2.0 Attribute with Name: 
> urn:oid:1.3.6.1.4.1.5923.1.1.1.3
>

You new SP needs to add urn:oid:1.3.6.1.4.1.5923.1.1.1.3to its 
attribute-map.xml file.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130930/86bc01b3/attachment.html 


More information about the users mailing list