missing attributes in output from idpv3 /cas/serviceValidate

Paul B. Henson henson at cpp.edu
Thu Apr 7 14:16:12 EDT 2016


On Thu, Apr 07, 2016 at 11:33:59AM +0000, Marvin Addison wrote:

>     <bean id="CAS.ValidateConfiguration.default"
> parent="CAS.ValidateConfiguration"
>           p:resolveAttributes="false">
> 
> That flag exists to preserve string CAS 2.0 protocol compliance, which does
> not define attributes. We actually do this at Virginia Tech because we

Yup, you hit the nail on the head - you copied your attributes disabled
config onto the CAS Proxy Trust example on the wiki, which I used
without fully understanding it 8-/. I don't recall seeing that flag
documented anywhere else and I assumed it had something to do with
configuring the proxy trust and just rolled with it.

Once I removed that parameter the serviceValidate endpoint started
returning attributes and everything is working, thanks for all the help
and sorry for all the noise for such a silly config issue. You might
consider removing that parameter from the wiki example though, or adding
some explicit documentation for it higher up on the page so it's easier
to understand what it does.

Thanks again...


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768


More information about the users mailing list