SP 2.5 + Windows Apache 2.2 not populating environment vars

[Jerry B. Altzman]

Hi,

On Wed Dec 03 2014 at 2:27:05 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> I don't know what testshib releases, but your logs will tell you exactly
> what you're getting or that you're skipping because there's no rule
> defined to extract it.
>

Right, and in fact, I see it in the shibd log -- which is why I'm convinced
it's a shibd misconfig.


> >I do get:
> Then either you're not getting the attributes or you're not mapping them.
>

OK, well as grabbed from the log, I'm getting (for example)
<saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1"
 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">alterego</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="eduPersonAffiliation" Name="
urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="
urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Member</saml2:AttributeValue>
</saml2:Attribute>

Right, so I'm getting something, yes?
And in my attribute-map.xml, I have (not commented out)
     <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
and
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/>

So...presumably, these should be being mapped into environment variables
that might smell like "uid" or "assurance", right?
But there are no variables at all...thus my confusion.
In the shibd.log, I see much XML activity, and I see

2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: inserted record
(_63ffc3b15b9678a560f582a8a4c6e5c8) in context
(_104bc35e38fe2d3af78c15f37c4dd546) with expiration (1417638550)
2014-12-03 14:29:10 INFO Shibboleth.SessionCache [4]: new session created:
ID (_104bc35e38fe2d3af78c15f37c4dd546) IdP (
https://idp.testshib.org/idp/shibboleth)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (209.137.157.3)
2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: deleted record
(792f1224b59ac34acefc420bf1c17608aabac9ad18f25a2c56b6b6732e4391c2) in
context (RelayState)
2014-12-03 14:29:10 DEBUG Shibboleth.SSO.SAML2 [4]: ACS returning via
redirect to: https://host.com/cgi-bin/file.name
2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
(find::StorageService::SessionCache)
2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration
of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to
(1417638550)
2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
(touch::StorageService::SessionCache)
2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration
of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to
(1417638550)
2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
(touch::StorageService::SessionCache)
2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration
of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to
(1417638550)

(I have sanitized out the actual hostname.)

Have I not mapped correctly? I really thought I read the wiki for
comprehension...

Thanks for your help!

-- Scott
>

//jbaltz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141203/e5ac5fd5/attachment.html