SP 2.5 + Windows Apache 2.2 not populating environment vars
Jerry B. Altzman
jbaltz at gmail.com
Wed Dec 3 16:42:52 EST 2014
Hi again.
On Wed Dec 03 2014 at 3:19:03 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 12/3/14, 8:06 PM, "Jerry B. Altzman" <jbaltz at gmail.com> wrote:
> >
> >So all this means...that shibd is getting the XML, and unpacking it, and
> >then not knowing what to do with the mapping?
> It's possible. It doesn't do anything unless it's told to, it doesn't
> automatically handle any Attribute it sees because it doesn't know what
> you want to call it.
>
Right, I totally got that. That's why I uncommented pretty much everything,
in order to try to capture something.
I know that in the XML I am getting from testshib (from which I posted a
snippet) I get the uid attribute sent along. That appears in my shibd.log
file.
> Ok, so you see how there's nothing there under the attributes being
> cached? That means you didn't map anything that was found in the
> assertion. If there are attributes in it you didn't map, it will log that
> it skipped them. It won't log anything for a mapping rule that doesn't
> happen to correspond to anything it saw. But either way, there's no
> overlap at the moment between what testshib sent and what you mapped.
>
This is why I am so confused. I thought I had them in my attribute-map.xml
(from which I posted a snippet). So it sounds like: I am doing it all
right, and the nasal demons are infecting me.
Then all I can tell is what's above. If Kevin's around, or if there's a
> document somewhere on the site, it would help to know what testshib
> actually sends, but you should see that in the XML in the log, and you
> *must* have log lines noting that it's ignoring certain attributes it's
> seeing.
>
I don't see it saying it ignores anything.
C:\Program Files\shibboleth-sp\var\log\shibboleth>find /i "ignore" shibd.log
---------- SHIBD.LOG
2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building
SecurityPolicyRule of type Ignore
2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building
SecurityPolicyRule of type Ignore
2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building
SecurityPolicyRule of type Ignore
OK, time to wave the dead chicken over this.
Thanks for the pointers!
//jbaltz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141203/700cb060/attachment.html
More information about the users
mailing list