Connection timeout in AttributeQuery

[Cantor, Scott]

On 2/17/16, 1:53 PM, "users on behalf of Rogier Doekes" <users-bounces at shibboleth.net on behalf of rogier.doekes at bigbrainworks.com> wrote:



>The shibd.log file gives me this:
>2016-02-17 13:46:25 ERROR Shibboleth.AttributeResolver.Query [2]: exception during SAML query to https://wmp.firstrate.com/idp/profile/SAML2/SOAP/AttributeQuery: CURLSOAPTransport failed while contacting SOAP endpoint

It is extremely unlikely that that IdP intends to be supporting SAML 2 queries or that you would get anything back from the query since it's only querying because nothing was released to you to begin with. Search the list archives or review the wiki on usage of the back channel.

>What could be the cause for this connection timeout?  I would like to get the complete SAML response, so I can use the attributes in the securing application.

The timeout is set by you, and the reason is likely a firewall, and the metadata incorrectly advertising an unsupported endpoint, and your problem here is with the IdP's decisions on attribute release in the first place.

-- Scott