Nagging error: 'unable to extract attributes, unknown XML object type: saml2p:Response'

Paul Wilt pewilt at gmail.com
Fri Dec 2 10:09:39 EST 2016


I have been trying figure out why we are getting this error in our
shibd.log for the French federation (renater.fr):

2016-11-30 10:44:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [7]:
validating signature profile
2016-11-30 10:44:38 DEBUG XMLTooling.TrustEngine.ExplicitKey [7]:
attempting to validate signature with the peer's credentials
2016-11-30 10:44:38 DEBUG XMLTooling.TrustEngine.ExplicitKey [7]: signature
validated with credential
2016-11-30 10:44:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [7]:
signature verified against message issuer
2016-11-30 10:44:38 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation
[7]: assertion satisfied bearer confirmation requirements
2016-11-30 10:44:38 DEBUG Shibboleth.SSO.SAML2 [7]: SSO profile processing
completed successfully
2016-11-30 10:44:38 DEBUG Shibboleth.SSO.SAML2 [7]: extracting pushed
attributes...

==============================[ Begin: Error message
]=============================
2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]: unable to
extract attributes, unknown XML object type: saml2p:Response
2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]: skipping
unmapped NameID with format
(urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]: unable to
extract attributes, unknown XML object type: saml2:AuthnStatement
==============================[ End: Error message
]=============================

2016-11-30 10:44:38 DEBUG Shibboleth.SSO.SAML2 [7]: resolving attributes...
2016-11-30 10:44:38 DEBUG Shibboleth.AttributeResolver.Query [7]:
attempting SAML 2.0 attribute query
2016-11-30 10:44:38 WARN Shibboleth.AttributeResolver.Query [7]: no SAML 2
AttributeAuthority role found in metadata

I checked back through our signature.log and it appears that this started
happening on 2016-07-11 (July 11).

I have tried to figure this out but am currently stymied.

Any help would be greatly appreciated!
Paul (paul.wilt at proquest.com)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/a4af68f7/attachment.html>


More information about the users mailing list