users Digest, Vol 33, Issue 42

[Josh Christensen]

My request mapper looks like this:

<Host name="test.mysite.com" scheme="http" port="8080" applicationId="SSOTest">
				<Path name="test" authType="shibboleth" requireSession="false"/>
                <Path name="home/test" authType="shibboleth" requireSession="false"/>
            </Host>

The IDP is performing the post to http://test.mysite.com:8080/home/test

Is this the wrong url to have them post to?

Josh Christensen, Mobile and Web Platform Architect
FTNI - One Solution, Many Possibilities
13220 Birch Drive, Suite 120, Omaha, NE 68164
Phone 402-502-8777, ext. 110 | Fax 402-502-8788
jchristensen at FTNI.com | www.FTNI.com



This message and any attachments are confidential, may contain privileged information, and are intended solely for the recipient named above. If you are not the intended recipient, or a person responsible for delivery to the named recipient, you are notified that any review, distribution, dissemination or copying is prohibited.  If you have received this message in error, you should notify the sender by return email and delete the message from your computer system.


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, March 14, 2014 4:52 PM
To: Shib Users
Subject: Re: users Digest, Vol 33, Issue 42

On 3/14/14, 5:46 PM, "Josh Christensen" <jchristensen at ftni.com> wrote:

>There is nothing logged about skipped attributes.  I am looking in 
>shibd.log.  Nothing is logged after the listener service is started 
>when I come to the site from the IDP.

Then it isn't consuming anything. I would imagine transaction.log is also empty. I don't now what you're doing, but you're not processing a SAML response at /Shibboleth.sso/SAML2/POST.

I don't now what the IdP is doing or where you're telling it to send the response, but something's just basically not configured.

>No HTTP header by the name of HTTP_EMAIL is being created.  I do see, 
>however, HTTP_SHIBSPOOFCHECK.

You'll see that regardless of whether a session exists. In this case, no session is there and you're not asking it to create one or there'd be logs. Attribute mapping really is immaterial, it just would have failed due to that later on.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net