idp v3 - How to make the name and friendlyname of an attribute the same?
Marc Boorshtein
mboorshtein at gmail.com
Thu Mar 12 11:26:19 EDT 2015
On Thu, Mar 12, 2015 at 11:20 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 3/12/15, 11:09 AM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
>
> ><resolver:AttributeDefinition
> >id="cn"xsi:type="ad:Simple"sourceAttributeID="cn">
> > <resolver:Dependency
>
> As a sanity check, use a different internal name for the attribute
> definition and see if that helps. Or use 3.1 and see if anything changes.
>
>
so change the id attribute of the resolver:AttributeDefinition ?
> >But I'm still not getting anything in the assertion (nor am I being
> prompted to consent to the attributes being released). Am I missing
> something?
>
> If you have consent on, and it doesn't prompt, then no attributes making
> it past the filter step are configured to require consent. But the log can
> tell you exactly what makes it past the filter. And I can also tell you
> that changing the name has no impact on any step but the final encoding. So
> my guess is you're hitting a bug in the resolver that was fixed.
>
prior to changing the name on the encoder the attribute being handled by
consent. Looking in the logs all I see is:
2015-03-12 10:04:01,148 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95]
- Attribute Definition 'eduPersonPrincipalName': setting sourceAttributeId
eduPersonPri
ncipalName.
2015-03-12 10:04:01,149 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106]
- Attribute Definition 'eduPersonPrincipalName': adding 2 encoders.
2015-03-12 10:04:01,161 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58]
- Parsing configuration for AttributeDefinition plugin with id : uid
2015-03-12 10:04:01,161 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52]
- Parsing configuration for Dependency with pluginId : myLDAP
2015-03-12 10:04:01,161 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95]
- Attribute Definition 'uid': setting sourceAttributeId uid.
2015-03-12 10:04:01,162 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106]
- Attribute Definition 'uid': adding 2 encoders.
2015-03-12 10:04:01,163 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58]
- Parsing configuration for AttributeDefinition plugin with id : cn
2015-03-12 10:04:01,164 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52]
- Parsing configuration for Dependency with pluginId : myLDAP
2015-03-12 10:04:01,164 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95]
- Attribute Definition 'uid': setting sourceAttributeId cn.
2015-03-12 10:04:01,164 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106]
- Attribute Definition 'uid': adding 2 encoders.
2015-03-12 10:04:01,165 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58]
- Parsing configuration for AttributeDefinition plugin with id : sn
2015-03-12 10:04:01,166 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52]
- Parsing configuration for Dependency with pluginId : myLDAP
2015-03-12 10:04:01,166 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95]
- Attribute Definition 'uid': setting sourceAttributeId sn.
2015-03-12 10:04:01,166 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106]
- Attribute Definition 'uid': adding 2 encoders.
2015-03-12 10:04:01,167 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58]
- Parsing configuration for AttributeDefinition plugin with id : mail
2015-03-12 10:04:01,168 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52]
- Parsing configuration for Dependency with pluginId : myLDAP
2015-03-12 10:04:01,168 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95]
- Attribute Definition 'uid': setting sourceAttributeId mail.
2015-03-12 10:04:01,168 - DEBUG
[net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106]
- Attribute Definition 'uid': adding 2 encoders.
so it appears that the encoder is being rejected. note that uid has 2
encoders but after cn and sn there's no mention of encoders so I'm assuming
they're not being processed or are being skipped?
Thanks
Marc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150312/3704bfdb/attachment.html
More information about the users
mailing list