AW: exportAssertion not working

[Kevin Flückiger]

Thank you for your answer PETER!

I have currently not configured <SessionCache> because from the documentation I understand that cacheAssertions should already be enabled by default. Correct me if I'm wrong.
You mean the resource I'm accessing (at the moment the standard apache index.html) should actually be in the /var/www directory? This should be the case, yes. 
The rest works fine, yes. I can login on the idp login page, then I get redirected to the index html and I can see the session cookie, just not the headers I'm expecting. I can see the released attributes when I go to /Session.


-----Ursprüngliche Nachricht-----
Von: users [mailto:users-bounces at shibboleth.net] Im Auftrag von Peter Schober
Gesendet: Freitag, 24. April 2015 15:49
An: users at shibboleth.net
Betreff: Re: exportAssertion not working

* Kevin Flückiger <kevin.flueckiger at inovitas.ch> [2015-04-24 15:36]:
> Then I have set the following in my apache2’s site config (I’m not using RequestMapper):
> <Directory /var/www/>
>                 AuthType shibboleth
>                 ShibRequestSetting requireSession true
>                 ShibRequestSetting exportAssertion true
>                 Require valid-user
> </Directory>
> 
> I expected that when I now call the default application from my 
> browser that I will see the Shib-Assertion-Count and the 
> Shib-Assertion-NN headers in the response headers. Sadly I don’t see 
> either header. Is there something I’m missing or did I understand the 
> mechanism wrong?

Make sure you don't have disabled cacheAssertions in the SessionCache:
  <SessionCache type="StorageService" StorageService="mem" cacheAssertions="false" /> Also make sure the resource you're accesing matches the httpd directive (Directory /var/www). I'm assuming the rest works fine, i.e., you're being redirected to the IDP and coming back with a session? You're seeing other data/attributes just fine?
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net