SP 2.5.2 / PHP / metadataAttributePrefix

[Phil Lello]

Hi,

I'm not sure if this is a bug that's been fixed (nothing showing in JIRA
that I can see), a quirk of Apache/PHP, or a config option I've missed, but
ApplicationDefaults at metadataAttributePrefix doesn't seem to work.

I have a test SP configured and it's receiving the expected attributes from
the test IdP. My shibboleth2.xml includes:

    <ApplicationDefaults entityID="..."
                         REMOTE_USER="eppn persistent-id targeted-id"
                         metadataAttributePrefix="Meta-"
                         sessionHook="/Shibboleth.sso/AttrChecker"
                         signing="false" encryption="false">

Shib-Application-ID default Shib-Session-ID
_090c43f7e49f752d7d75f23c639b0938 Shib-Identity-Provider https://...
Shib-Authentication-Instant 2015-04-16T22:30:56.539Z
Shib-Authentication-Method
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-AuthnContext-Class
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-Session-Index _20df03f993b759b7cc589a511c2fdbc9 eppn testUser at ... mail
testUser at ... uid testUser
I'd expect those attributes to come through as Meta-eppn, Meta-mail, and
Meta-uid.

Software versions are:

dpkg -l | grep -e apache2 -e shib
ii  apache2                             2.4.7-1ubuntu4.4
amd64        Apache HTTP Server
ii  apache2-bin                         2.4.7-1ubuntu4.4
amd64        Apache HTTP Server (binary files and modules)
ii  apache2-data                        2.4.7-1ubuntu4.4
all          Apache HTTP Server (common files)
ii  apache2-mpm-prefork                 2.4.7-1ubuntu4.4
amd64        transitional prefork MPM package for apache2
ii  libapache2-mod-php5                 5.5.9+dfsg-1ubuntu4.7
amd64        server-side, HTML-embedded scripting language (Apache 2 module)
ii  libapache2-mod-shib2                2.5.2+dfsg-2
amd64        Federated web single sign-on system (Apache module)
ii  liblog4shib1:amd64                  1.0.8-1
amd64        log4j-style configurable logging library for C++ (runtime)
ii  libshibsp6:amd64                    2.5.2+dfsg-2
amd64        Federated web single sign-on system (runtime)
ii  shibboleth-sp2-schemas              2.5.2+dfsg-2
all          Federated web single sign-on system (schemas)

Is the problem my expectations, my versions, my configuration, or a bug?

Phil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150416/a6ab1fc9/attachment.html