Does mod_shib ever do AttributeQueries?

[Wessel, Keith]

Thanks, Scott. In that case, I have a theory about what happened here. Thanks much.

And since I haven't seen it in the mod_shib documentation, how would I tell mod_shib not to do attribute queries when no attributes are returned?

Keith


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, April 15, 2014 3:34 PM
To: Shib Users
Subject: Re: Does mod_shib ever do AttributeQueries?

On 4/15/14, 4:19 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>I'm pretty sure we can get away with turning this off. I still can't 
>figure out what would have caused these SPs to generate this tiny hand 
>full of attribute queries. Is mod_shib smart enough, if it receives an 
>assertion without any attributes, to try an attribute query?

Yes, if you don't tell it not to.

> If so, this could have been a fluke when the post content from the IDP 
>didn't make it through to the SPs a hand full of times.

No, a failed POST is just an error. This is the IdP providing no attributes.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net