Nagging error: 'unable to extract attributes, unknown XML object type: saml2p:Response'

[Paul Wilt]

Scott:

Thanks for the replies to my questions.

You are right--since I infrequently get pulled into Shibboleth issues here
at work--my inexperience makes me nervous about trusting things.  I will go
back to the French federation and ask them to verify that they are sending
the attributes I need.

Again-I really appreciate you time!

Thanks,
Paul

On Fri, Dec 2, 2016 at 11:02 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 12/2/16, 10:57 AM, "users on behalf of Paul Wilt" <
> users-bounces at shibboleth.net on behalf of pewilt at gmail.com> wrote:
>
> > I use the signature.log as an easy method to see the decrypted messages
> instead of having to rummage around
> > in the shibd.log.
>
> It's incredibly inefficient (that's an understatement), but it's your
> system. It's also just not necessary. You don't need anything but INFO to
> know exactly what got sent. If you have a mapping rule for some attribute,
> and it doesn't show up, then it's not there under that name in the
> assertion. No guessing needed. You are just not trusting it.
>
> If it's there in the XML but you don't have a mapping rule, you'd get a
> message saying it ignored an Attribute. And if it were thrown out due to
> some filtering rule, there would at least be a mention of that.
>
> >    No matter what shibd is no longer delivering that
> eduPersonScopedAffiliation value.  Is there some way for me
> > to debug / figure out why that value has disappeared?
>
> No, because from the information you're presenting, the reason is that the
> IdP isn't sending it.
>
> -- Scott
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/e380d412/attachment.html>