Does mod_shib ever do AttributeQueries?

Cantor, Scott cantor.2 at
Tue Apr 15 16:33:58 EDT 2014

On 4/15/14, 4:19 PM, "Wessel, Keith" <kwessel at> wrote:
>I'm pretty sure we can get away with turning this off. I still can't
>figure out what would have caused these SPs to generate this tiny hand
>full of attribute queries. Is mod_shib smart enough, if it receives an
>assertion without any attributes, to try an attribute query?

Yes, if you don't tell it not to.

> If so, this could have been a fluke when the post content from the IDP
>didn't make it through to the SPs a hand full of times.

No, a failed POST is just an error. This is the IdP providing no

-- Scott

More information about the users mailing list