SP 2.5 + Windows Apache 2.2 not populating environment vars

[Jerry B. Altzman]

Wups, of course, I have
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1" id="member"/>

and I'm still not getting "member" or "Shib-member" environment variables...

//jbaltz

On Wed Dec 03 2014 at 2:39:52 PM Jerry B. Altzman <jbaltz at gmail.com> wrote:

> Hi,
>
> On Wed Dec 03 2014 at 2:27:05 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>> I don't know what testshib releases, but your logs will tell you exactly
>> what you're getting or that you're skipping because there's no rule
>> defined to extract it.
>>
>
> Right, and in fact, I see it in the shibd log -- which is why I'm
> convinced it's a shibd misconfig.
>
>
>> >I do get:
>> Then either you're not getting the attributes or you're not mapping them.
>>
>
> OK, well as grabbed from the log, I'm getting (for example)
> <saml2:Attribute FriendlyName="uid" Name="
> urn:oid:0.9.2342.19200300.100.1.1" NameFormat="
> urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
> <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance
> " xsi:type="xs:string">alterego</saml2:AttributeValue>
> </saml2:Attribute>
> <saml2:Attribute FriendlyName="eduPersonAffiliation" Name="
> urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="
> urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
> <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance
> " xsi:type="xs:string">Member</saml2:AttributeValue>
> </saml2:Attribute>
>
> Right, so I'm getting something, yes?
> And in my attribute-map.xml, I have (not commented out)
>      <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid"
> NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
> and
>     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/>
>
> So...presumably, these should be being mapped into environment variables
> that might smell like "uid" or "assurance", right?
> But there are no variables at all...thus my confusion.
> In the shibd.log, I see much XML activity, and I see
>
> 2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: inserted record
> (_63ffc3b15b9678a560f582a8a4c6e5c8) in context
> (_104bc35e38fe2d3af78c15f37c4dd546) with expiration (1417638550)
> 2014-12-03 14:29:10 INFO Shibboleth.SessionCache [4]: new session created:
> ID (_104bc35e38fe2d3af78c15f37c4dd546) IdP (
> https://idp.testshib.org/idp/shibboleth)
> Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (209.137.157.3)
> 2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: deleted record
> (792f1224b59ac34acefc420bf1c17608aabac9ad18f25a2c56b6b6732e4391c2) in
> context (RelayState)
> 2014-12-03 14:29:10 DEBUG Shibboleth.SSO.SAML2 [4]: ACS returning via
> redirect to: https://host.com/cgi-bin/file.name
> 2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
> (find::StorageService::SessionCache)
> 2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated
> expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546)
> to (1417638550)
> 2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
> (touch::StorageService::SessionCache)
> 2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated
> expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546)
> to (1417638550)
> 2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message
> (touch::StorageService::SessionCache)
> 2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated
> expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546)
> to (1417638550)
>
> (I have sanitized out the actual hostname.)
>
> Have I not mapped correctly? I really thought I read the wiki for
> comprehension...
>
> Thanks for your help!
>
> -- Scott
>>
>
> //jbaltz
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141203/a57ce308/attachment.html