Continuing Attribute release problems

Michael Dahlberg olgamirth at gmail.com
Mon Aug 17 13:08:08 EDT 2015


On Mon, Aug 17, 2015 at 12:58 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/17/15, 12:40 PM, "users on behalf of Michael Dahlberg" <
> users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:
>
> >I'm continuing to have attribute release problems.  Maybe a second (or
> third) pair of eyes on my config will indicate my error.
>
> Not without any logs.
>
> >When I run the following command:
> >
> >/usr/local/idp/bin/aacli.sh --configDir=/usr/local/idp/conf
> --principal=dahlberg --requester=https://admin.dc4.pageuppeople.com/
> >
> >I get the result:
> >
> >No attribute statement.
>
> Leave off the requester part and see if you get any output that includes
> the desired attribute.


Ok, I just tried that and got the "No attribute statement" ; but when I try
other RequesterStrings from other SPs that I work with I get an appropriate
list of attributes and their values.  Should I be getting something without
the "--requester" and if so, why wouldn't I be getting it?




> Assuming you do, then you need to see what the logs say on DEBUG when it
> resolves that attribute. Barring a typo, there can't be any values there
> for it to release, it's a resolver issue not a release issue.
>
>
The attribute WindowsDomainQualifiedName does successfully resolve and is
being released for other SPs.  Wouldn't that indicate its a release issue?

Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150817/636224dc/attachment.html>


More information about the users mailing list