Nagging error: 'unable to extract attributes, unknown XML object type: saml2p:Response'

Paul Wilt pewilt at gmail.com
Fri Dec 2 10:40:49 EST 2016


Peter:

We have always run with the DEBUG enabled so that we can figure out why our
customers are having problems when they complain to us.

We are expecting an eduPersonScopedAffiliation to come back from their test
IdP and it no longer gets returned.

Back in May 2016 the signature.log shows a message coming back from the
test IdP with the all the appropriate Attributes.   Beginning 2016-07-11
the signature.log no longer shows these attributes coming back.  At the
same time these DEBUG messages began appearing!

I was attributing these DEBUG messages to indicate that something prevented
the attribute extraction from happening.

Am I wrong in my assumptions?

On Fri, Dec 2, 2016 at 10:23 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Paul Wilt <pewilt at gmail.com> [2016-12-02 16:10]:
> > I have been trying figure out why we are getting this error in our
> > shibd.log for the French federation (renater.fr):
>
> 1. because it's not an error
> 2. because you're running on DEBUG
>
> > ==============================[ Begin: Error message
> ]=============================
> > 2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]: unable
> to
> > extract attributes, unknown XML object type: saml2p:Response
> > 2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]:
> skipping
> > unmapped NameID with format
> > (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
> > 2016-11-30 10:44:38 DEBUG Shibboleth.AttributeExtractor.XML [7]: unable
> to
> > extract attributes, unknown XML object type: saml2:AuthnStatement
> > ==============================[ End: Error message
> ]=============================
>
> the word "DEBUG" in the line means it's a DEBUG-level message.
> not an error, that would contain the word "ERROR as log level.
>
> > I checked back through our signature.log and it appears that this
> > started happening on 2016-07-11 (July 11).
>
> Then someone probably forgot to disable DEBUG logging 6 months ago.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/149110a0/attachment.html>


More information about the users mailing list