Does mod_shib ever do AttributeQueries?

Wessel, Keith kwessel at
Tue Apr 15 16:36:06 EDT 2014

Thanks, Scott. In that case, I have a theory about what happened here. Thanks much.

And since I haven't seen it in the mod_shib documentation, how would I tell mod_shib not to do attribute queries when no attributes are returned?


-----Original Message-----
From: users-bounces at [mailto:users-bounces at] On Behalf Of Cantor, Scott
Sent: Tuesday, April 15, 2014 3:34 PM
To: Shib Users
Subject: Re: Does mod_shib ever do AttributeQueries?

On 4/15/14, 4:19 PM, "Wessel, Keith" <kwessel at> wrote:
>I'm pretty sure we can get away with turning this off. I still can't 
>figure out what would have caused these SPs to generate this tiny hand 
>full of attribute queries. Is mod_shib smart enough, if it receives an 
>assertion without any attributes, to try an attribute query?

Yes, if you don't tell it not to.

> If so, this could have been a fluke when the post content from the IDP 
>didn't make it through to the SPs a hand full of times.

No, a failed POST is just an error. This is the IdP providing no attributes.

-- Scott

To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list