script for defining right "cn" attribute.

[Jan Oppolzer]

On Fri, Jan 15, 2016 at 10:27:11AM +0100, Peter Schober wrote:
> Since the audit log says "cn" has been released (and assuming that
> comes from the config you posted) you'd need to look at the SP side
> (i.e., ask CESNET). Or look at the SAML assertion for possible reasons
> why the SP would reject it (requires debugging of the appropriate
> opensaml classes in the IDP).
> Asking the SP why CN wasn't accepted seems much easier, as the answer
> will be definitive from their logs.

It's been caused by incorrect (non-standard and non-expected) attribute
encoding.

-Jan

-- 
  Jan Oppolzer <Jan.Oppolzer at cesnet.cz>
  AAI @ CESNET, <http://www.cesnet.cz/>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3051 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20160115/b3773a3b/attachment-0001.bin>