Strange problem with the MCB and attribute resolving

Paul Hethmon paul.hethmon at
Thu Apr 24 17:19:08 EDT 2014

On Apr 24, 2014, at 5:06 PM, Wessel, Keith <kwessel at<mailto:kwessel at>> wrote:

I tried turning up the MCB log level to debug and saw no more details about the specific error from the LDAP search failure. I can't reproduce the error using the IDP's attribute resolver with aacli.

MCB just piggybacks onto the Shib resolver instance. So the only logging it has would be about getting that instance. There are some statements at DEBUG level when it gets data. A WARN if it can't get resolver instance. If it got the resolver instance, but no actual data (which sounds like that is happening here), then it would end up logging nothing.

As Scott mentioned, turn up the LDAP logging and see what pops up.


Paul Hethmon
Chief Software Architect
paul.hethmon at<mailto:paul.hethmon at>

-------------- next part --------------
An HTML attachment was scrubbed...

More information about the users mailing list