Does mod_shib ever do AttributeQueries?
cantor.2 at osu.edu
Tue Apr 15 16:33:58 EDT 2014
On 4/15/14, 4:19 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>I'm pretty sure we can get away with turning this off. I still can't
>figure out what would have caused these SPs to generate this tiny hand
>full of attribute queries. Is mod_shib smart enough, if it receives an
>assertion without any attributes, to try an attribute query?
Yes, if you don't tell it not to.
> If so, this could have been a fluke when the post content from the IDP
>didn't make it through to the SPs a hand full of times.
No, a failed POST is just an error. This is the IdP providing no
More information about the users