ADFS 2.0 (IDP) and Shibboleth 2.5.3 (SP)
Richard Genthner
moose at symplicity.com
Thu Mar 5 17:22:37 EST 2015
Scott,
here is the debug log
https://gist.githubusercontent.com/moos3/e7f903d9c707e567878e/raw/0273d8ac76a10bd87ce169adb3a6d559d3da35e1/gistfile1.txt
and the saml response
https://gist.github.com/moos3/f4abd55584b908067dc7
I can't figure out for the life of me why that isn't getting in there.
> Cantor, Scott <mailto:cantor.2 at osu.edu>
> March 5, 2015 at 4:52 PM
>
> It's on at least INFO if not WARN, there's nothing mysterious about
> spotting it.
>
> Honestly the trace is mostly moot, if it's not logged, it's there, or was
> never sent in the first place, which would be in the transaction log.
>
> -- Scott
>
> Richard Genthner <mailto:moose at symplicity.com>
> March 5, 2015 at 4:22 PM
> do you have any magic grep to just pull out unmapped attributes ? I'm
> getting a trace for you.
>
> Cantor, Scott wrote:
> Cantor, Scott <mailto:cantor.2 at osu.edu>
> March 4, 2015 at 5:03 PM
> On 3/4/15, 9:49 PM, "Richard Genthner"<moose at symplicity.com> wrote:
>
>
>
>> Scott,
>> that attribute mapping isn’t pulling the value out of the response even
>> tho its there. which is why i’m lost here. normally i can just pull these
>> out but nothing i try can get this out of their response.
>
> Hmm, can you post a data-elided trace of what the attribute looks like on
> the wire and then the rule again?
>
> I would be looking at the log at this point, there should be some kind of
> WARN message about it skipping the unmapped attribute if it's not there or
> something about it being filtered out.
>
> -- Scott
>
> Richard Genthner <mailto:moose at symplicity.com>
> March 4, 2015 at 4:49 PM
> Scott,
> that attribute mapping isn’t pulling the value out of the response
> even tho its there. which is why i’m lost here. normally i can just
> pull these out but nothing i try can get this out of their response.
> Cantor, Scott <mailto:cantor.2 at osu.edu>
> March 4, 2015 at 4:41 PM
> On 3/4/15, 9:15 PM, "Richard Genthner"<moose at symplicity.com> wrote:
>
>
>
>> Scott,
>> I how would i get to this attribute being released by a client ?
>
> You already did, it's in "eppn". Unless I'm just not seeing something.
>
> -- Scott
>
>
--
Richard Genthner
Senior System Administrator
Symplicity
tel 703.373.7033
web www.symplicity.com <http://www.symplicity.com>
<http://www.getpostbox.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150305/114675ed/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: compose-unknown-contact.jpg
Type: image/jpeg
Size: 770 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150305/114675ed/attachment.jpg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postbox-contact.jpg
Type: image/jpeg
Size: 1334 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150305/114675ed/attachment-0001.jpg
More information about the users
mailing list