Continuing Attribute release problems
Michael Dahlberg
olgamirth at gmail.com
Mon Aug 17 13:08:08 EDT 2015
On Mon, Aug 17, 2015 at 12:58 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 8/17/15, 12:40 PM, "users on behalf of Michael Dahlberg" <
> users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:
>
> >I'm continuing to have attribute release problems. Maybe a second (or
> third) pair of eyes on my config will indicate my error.
>
> Not without any logs.
>
> >When I run the following command:
> >
> >/usr/local/idp/bin/aacli.sh --configDir=/usr/local/idp/conf
> --principal=dahlberg --requester=https://admin.dc4.pageuppeople.com/
> >
> >I get the result:
> >
> >No attribute statement.
>
> Leave off the requester part and see if you get any output that includes
> the desired attribute.
Ok, I just tried that and got the "No attribute statement" ; but when I try
other RequesterStrings from other SPs that I work with I get an appropriate
list of attributes and their values. Should I be getting something without
the "--requester" and if so, why wouldn't I be getting it?
> Assuming you do, then you need to see what the logs say on DEBUG when it
> resolves that attribute. Barring a typo, there can't be any values there
> for it to release, it's a resolver issue not a release issue.
>
>
The attribute WindowsDomainQualifiedName does successfully resolve and is
being released for other SPs. Wouldn't that indicate its a release issue?
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150817/636224dc/attachment.html>
More information about the users
mailing list