Consent Preferences Not Stored

[Marvin Addison]

On Tue, Apr 18, 2017 at 4:41 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> What happens if you switch it just for testing back to a server storage
> service, even just in-memory? I would expect the result there in the log to
> be the same.
>

Using shibboleth.StorageService, it works correctly. On the first run the
logs look the same afaict, but on the second run I see it loading the
serialized preference from storage:

2017-04-18 16:48:13,194 DEBUG
net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:53
2001:468:c80:2103:30d0:a481:5dcf:e9ae Profile Action
ReadConsentFromStorage: Read storage record
'org.opensaml.storage.MutableStorageRecord at 4d24b1cd' with context
'intercept/attribute-release' and key 'serac:
https://shib-sp.middleware.vt.edu/shibboleth'
2017-04-18 16:48:13,199 DEBUG
net.shibboleth.idp.consent.storage.impl.ConsentSerializer:168
2001:468:c80:2103:30d0:a481:5dcf:e9ae Deserialized context
'intercept/attribute-release' key 'serac:
https://shib-sp.middleware.vt.edu/shibboleth' value
'[{"id":"UDC_IDENTIFIER"},{"id":"accountState"},{"id":"authId"},{"id":201},{"id":300},{"id":305},{"id":307},{"id":117},{"id":"groupMembership"},{"id":"groupMembershipUugid"},{"id":"loa"},{"id":"mail"},{"id":"opaqueIDSeed"},{"id":"passwordExpirationDate"},{"id":"passwordState"},{"id":"personType"},{"id":"sn"},{"id":"suppressDisplay"},{"id":"uid"},{"id":"uupid"},{"id":"virginiaTechAffiliation"}]'
expiration '1508273270143' as '{UDC_IDENTIFIER=Consent{id=UDC_IDENTIFIER,
value=null, isApproved=true}, accountState=Consent{id=accountState,
value=null, isApproved=true}, authId=Consent{id=authId, value=null,
isApproved=true}, displayName=Consent{id=displayName, value=null,
isApproved=true}, eduPersonAffiliation=Consent{id=eduPersonAffiliation,
value=null, isApproved=true},
eduPersonPrimaryAffiliation=Consent{id=eduPersonPrimaryAffiliation,
value=null, isApproved=true},
eduPersonPrincipalName=Consent{id=eduPersonPrincipalName, value=null,
isApproved=true}, givenName=Consent{id=givenName, value=null,
isApproved=true}, groupMembership=Consent{id=groupMembership, value=null,
isApproved=true}, groupMembershipUugid=Consent{id=groupMembershipUugid,
value=null, isApproved=true}, loa=Consent{id=loa, value=null,
isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true},
opaqueIDSeed=Consent{id=opaqueIDSeed, value=null, isApproved=true},
passwordExpirationDate=Consent{id=passwordExpirationDate, value=null,
isApproved=true}, passwordState=Consent{id=passwordState, value=null,
isApproved=true}, personType=Consent{id=personType, value=null,
isApproved=true}, sn=Consent{id=sn, value=null, isApproved=true},
suppressDisplay=Consent{id=suppressDisplay, value=null, isApproved=true},
uid=Consent{id=uid, value=null, isApproved=true}, uupid=Consent{id=uupid,
value=null, isApproved=true},
virginiaTechAffiliation=Consent{id=virginiaTechAffiliation, value=null,
isApproved=true}}'
2017-04-18 16:48:13,201 DEBUG
net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:65
2001:468:c80:2103:30d0:a481:5dcf:e9ae Profile Action
PopulateConsentContext: Populating consents: [UDC_IDENTIFIER, accountState,
authId, displayName, eduPersonAffiliation, eduPersonPrimaryAffiliation,
eduPersonPrincipalName,givenName, groupMembership, groupMembershipUugid,
loa, mail, opaqueIDSeed, passwordExpirationDate, passwordState, personType,
sn, suppressDisplay, uid, uupid, virginiaTechAffiliation]
2017-04-18 16:48:13,201 DEBUG
net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:127
2001:468:c80:2103:30d0:a481:5dcf:e9ae Consent is not required, previous
consents match current consents  <users-unsubscribe at shibboleth.net>

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170418/d9b37d43/attachment.html>