users Digest, Vol 33, Issue 42

[Josh Christensen]

There is nothing logged about skipped attributes.  I am looking in shibd.log.  Nothing is logged after the listener service is started when I come to the site from the IDP.

Before I started testing, I turned on all logging and set the level to debug for everything in shibd.logger

Every time I try a test, I am restarting IIS and the shibboleth service and deleting all of the logs so that each log has only the information for that test.

No HTTP header by the name of HTTP_EMAIL is being created.  I do see, however, HTTP_SHIBSPOOFCHECK.



-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, March 14, 2014 4:34 PM
To: Shib Users
Subject: Re: users Digest, Vol 33, Issue 42

On 3/14/14, 5:16 PM, "Josh Christensen" <jchristensen at ftni.com> wrote:

>All logging is enabled and set to debug level.
> Then I ran through the login process.  Then, I searched the logs for 
>"email".  There is only 1 hit.
>
>2014-03-14 16:05:13 DEBUG Shibboleth.PropertySet : added property 
>REMOTE_USER (eppn persistent-id targeted-id email)

When the extraction code sees an Attribute it has no mapping rule for, it has a log message containing this:

skipping unmapped SAML 2.0 Attribute with Name:


That's on INFO.

If the message does not appear, then the data is in fact mapped. But your older logs would show that message from when the name was incorrect. In no case could there be no messages in either, unless you're looking at the wrong log (i.e. not shibd.log)

I can't tell you how to access the data, that's dependent on the application tools. There should be a header created called HTTP_EMAIL and there's no punctuation in the mapped header name so no chance of IIS issues getting in the way.

If you want to know what it pulled out for sure, use /Shibboleth.sso/Session. If it's there, and named properly, then the rest is the application code.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net