Problem with my Attribute Filter

Kidd, Don dkidd at miamioh.edu
Thu Dec 18 14:44:39 EST 2014


Oh yea I do... I grabbed the wrong message from the log file...

23:25:52.253 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]
- Evaluating if filter policy Cayuse is active for principal kidddw
23:25:52.253 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134]
- Filter policy Cayuse is not active for principal kidddw


The problem is that after all filtering is done I get this...

23:25:52.262 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:128]
- No attributes remained after encoding and filtering by value, no
attribute statement built

So nothing is getting released and I don't know why..

--------
Don W. Kidd
Senior Systems Analyst
dkidd at MiamiOH.edu
513.529.9655

[image: PastedGraphic-1.tiff]

“If your actions inspire others to dream more, learn more, do more and
become more, you are a leader.”  -- John Quincy Adams



On Thu, Dec 18, 2014 at 2:40 PM, Kevin Foote <kpfoote at uoregon.edu> wrote:
>
>
>
> > On Dec 18, 2014, at 11:35 AM, Kidd, Don <dkidd at miamioh.edu> wrote:
> >
> >
> > <!-- Cayuse -->
> >   <AttributeFilterPolicy id="Cayuse">
> >        <PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
> value="https://miamioh.cayuse424.com/shibboleth" />
> >        <AttributeRule attributeID="eppnMiamiOH">
> >           <PermitValueRule xsi:type="basic:ANY" />
> >        </AttributeRule>
> > </AttributeFilterPolicy>
> >
> > For our vendor...  In the logs I see
> >
> > 23:25:51.708 - DEBUG
> [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:333]
> - Decoded request from relying party '
> https://miamioh.cayuse424.com/shibboleth'
> >
> > but lower in the log I see this:
> >
> > 23:25:52.249 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]
> - Evaluating if filter policy Cascade is active for principal kidddw
> >
> > 23:25:52.250 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134]
> - Filter policy Cascade is not active for principal kidddw
>
> Check the naming of your components here.
>
> The name on your filter(s) vs what you are seeing in logs this looks like
> a miss match to me.
>
> Your log statements don’t reflect the filter you are querying about here.
> Im guessing you have a filter called “Cascade” somewhere in
> your file as well as the one listed above.
>
>
>
> --------
> thanks
>  kevin.foote
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/a6b0fb06/attachment.html 


More information about the users mailing list