Problem with my Attribute Filter

IAM David Bantz dabantz at alaska.edu
Thu Dec 18 14:45:12 EST 2014


The policy you quoted is "Cayuse"; the inactive policy noted in your log is
"Cascade".  On the surface, there's no problem.

On Thu, Dec 18, 2014 at 10:35 AM, Kidd, Don <dkidd at miamioh.edu> wrote:
>
> I have having a problem and would appreciate any help, or suggestions on
> where I might be able to look to find a solution...
>
> We are adding a new vendor and I have added them to our filter policy.
>
> I have added this to my filter...
>
> <!-- Cayuse -->
>   <AttributeFilterPolicy id="Cayuse">
>        <PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
> value="https://miamioh.cayuse424.com/shibboleth" />
>        <AttributeRule attributeID="eppnMiamiOH">
>           <PermitValueRule xsi:type="basic:ANY" />
>        </AttributeRule>
> </AttributeFilterPolicy>
>
> For our vendor...  In the logs I see
>
> 23:25:51.708 - DEBUG
> [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:333]
> - Decoded request from relying party '
> https://miamioh.cayuse424.com/shibboleth'
>
> but lower in the log I see this:
>
> 23:25:52.249 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]
> - Evaluating if filter policy Cascade is active for principal kidddw
>
> 23:25:52.250 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134]
> - Filter policy Cascade is not active for principal kidddw
>
> Any suggestions on what might be the problem, or where I should look to
> find this problem, would be greatly appreciated...
>
> Don
>
>
> --------
> Don W. Kidd
> Senior Systems Analyst
> dkidd at MiamiOH.edu
> 513.529.9655
>
> “If your actions inspire others to dream more, learn more, do more and
> become more, you are a leader.”  -- John Quincy Adams
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/d36bcd3a/attachment.html 


More information about the users mailing list