Problem with my Attribute Filter

[IAM David Bantz]

Does the log indicate the filter "Cayuse" is active?
If yes, does the principal kiddow have a resolved and encoded value of
eppnMiamiOH
in the log?


On Thu, Dec 18, 2014 at 10:45 AM, IAM David Bantz <dabantz at alaska.edu>
wrote:
>
> The policy you quoted is "Cayuse"; the inactive policy noted in your log
> is "Cascade".  On the surface, there's no problem.
>
> On Thu, Dec 18, 2014 at 10:35 AM, Kidd, Don <dkidd at miamioh.edu> wrote:
>
>> I have having a problem and would appreciate any help, or suggestions on
>> where I might be able to look to find a solution...
>>
>> We are adding a new vendor and I have added them to our filter policy.
>>
>> I have added this to my filter...
>>
>> <!-- Cayuse -->
>>   <AttributeFilterPolicy id="Cayuse">
>>        <PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
>> value="https://miamioh.cayuse424.com/shibboleth" />
>>        <AttributeRule attributeID="eppnMiamiOH">
>>           <PermitValueRule xsi:type="basic:ANY" />
>>        </AttributeRule>
>> </AttributeFilterPolicy>
>>
>> For our vendor...  In the logs I see
>>
>> 23:25:51.708 - DEBUG
>> [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:333]
>> - Decoded request from relying party '
>> https://miamioh.cayuse424.com/shibboleth'
>>
>> but lower in the log I see this:
>>
>> 23:25:52.249 - DEBUG
>> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130]
>> - Evaluating if filter policy Cascade is active for principal kidddw
>>
>> 23:25:52.250 - DEBUG
>> [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134]
>> - Filter policy Cascade is not active for principal kidddw
>>
>> Any suggestions on what might be the problem, or where I should look to
>> find this problem, would be greatly appreciated...
>>
>> Don
>>
>>
>> --------
>> Don W. Kidd
>> Senior Systems Analyst
>> dkidd at MiamiOH.edu
>> 513.529.9655
>>
>> “If your actions inspire others to dream more, learn more, do more and
>> become more, you are a leader.”  -- John Quincy Adams
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/77c1f40f/attachment-0001.html