SP 2.5 + Windows Apache 2.2 not populating environment vars

[Cantor, Scott]

On 12/3/14, 7:39 PM, "Jerry B. Altzman" <jbaltz at gmail.com> wrote:
>
>Right, and in fact, I see it in the shibd log -- which is why I'm 
>convinced it's a shibd misconfig.

You didn't say what was in the log, so I don't know.

>OK, well as grabbed from the log, I'm getting (for example)

No, that's in the XML. I'm talking about what the SP is doing with it. If 
you don't have a mapping rule for something it sees, it will log that it's 
been skipped. And the tran log shows exactly what it did extract and 
cache, and the Session dumping handler shows roughly the same thing.

>And in my attribute-map.xml, I have (not commented out)
>     <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" 
>NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
>and
>    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/>

Then you should have clear log evidence and session dump evidence that 
they're there.

>So...presumably, these should be being mapped into environment variables 
>that might smell like "uid" or "assurance", right?

Yes.

>But there are no variables at all...thus my confusion.

You can't get the other variables and not get the attributes, so that 
suggests to me you're not actually mapping the attributes that you think 
you are, but there are ways to tell.

One possibility is you changed the attribute map and didn't restart 
things. The map does not reload by default, unlike most of the 
configuration.

-- Scott