Shibd not sending attributes

Peter Schober peter.schober at univie.ac.at
Tue Jun 14 18:16:27 EDT 2016


* Sachin Kadam <sachin.nihcas at gmail.com> [2016-06-14 23:53]:
> Following are my log messages. I am not getting attributes from SP -> my
> Java application

I don't see what those logs have to do with anything. Also haven't you
asked that same question at least twice before in recent weeks?

Anyway, first make sure the attributes are there in the SP, by
checking the Session handler and the transaction log. Also look for
"skip" messages in shibd.log. Only continue to look at Java once all
the expected attributes are visible in the Session handler.
Then make sure the location tunnelled/proxied to Java is enabled at
least for passive protection from the SP.

None of those things require DEBUG logging from the SP, btw, and you
don't need to debug the inner workings of the SP when passing
attributes on to Java from httpd is the issue.

How exactly are you integrating with Java? Tunnelling AJP and request
attributes (and with the AJP- prefix set in the Shib SP, as per the
documentation)? Or reverse proxying HTTP Request Headers?

Also, how are you determining that the attributes are missing?
Referencing them by name (using what name) or looping over any
available ones (the latter doesn't work with Tomcat)?
What methods are you using on the Java side to access the attributes?
getHeader? getAttribute?

*All* of the above needs to be correct in order to get the attributes
into Java. Unless you start providing concrete technical details all
that's left is referring  you to the documentation:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall

-peter


More information about the users mailing list