Does mod_shib ever do AttributeQueries?

[Cantor, Scott]

On 4/15/14, 4:19 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>I'm pretty sure we can get away with turning this off. I still can't
>figure out what would have caused these SPs to generate this tiny hand
>full of attribute queries. Is mod_shib smart enough, if it receives an
>assertion without any attributes, to try an attribute query?

Yes, if you don't tell it not to.

> If so, this could have been a fluke when the post content from the IDP
>didn't make it through to the SPs a hand full of times.

No, a failed POST is just an error. This is the IdP providing no
attributes.

-- Scott