Problem with my Attribute Filter
Kevin Foote
kpfoote at uoregon.edu
Thu Dec 18 14:40:33 EST 2014
> On Dec 18, 2014, at 11:35 AM, Kidd, Don <dkidd at miamioh.edu> wrote:
>
>
> <!-- Cayuse -->
> <AttributeFilterPolicy id="Cayuse">
> <PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://miamioh.cayuse424.com/shibboleth" />
> <AttributeRule attributeID="eppnMiamiOH">
> <PermitValueRule xsi:type="basic:ANY" />
> </AttributeRule>
> </AttributeFilterPolicy>
>
> For our vendor... In the logs I see
>
> 23:25:51.708 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:333] - Decoded request from relying party 'https://miamioh.cayuse424.com/shibboleth'
>
> but lower in the log I see this:
>
> 23:25:52.249 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130] - Evaluating if filter policy Cascade is active for principal kidddw
>
> 23:25:52.250 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134] - Filter policy Cascade is not active for principal kidddw
Check the naming of your components here.
The name on your filter(s) vs what you are seeing in logs this looks like a miss match to me.
Your log statements don’t reflect the filter you are querying about here. Im guessing you have a filter called “Cascade” somewhere in
your file as well as the one listed above.
--------
thanks
kevin.foote
More information about the users
mailing list