Shibboleth session storing doesn't work
Br LRd
blasterradius at gmail.com
Thu Apr 20 10:57:43 EDT 2017
Turns out I forgot to change the default attributes-map.xml so the IdP was
returning attributes that my SP was just ignoring. So user attribute
retrieval from session endpoint didn't work of course.
Interestingly enough,
"Shibboleth.SessionCache FastCGI shibresponder: session (foo) not yet bound
to client address type, binding it to ()"
still appears in syslog even though ostensibly everything seems to be
working perfectly.
On Fri, Apr 7, 2017 at 7:53 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 4/7/17, 10:46 AM, "users on behalf of Br LRd" <
> users-bounces at shibboleth.net on behalf of blasterradius at gmail.com> wrote:
>
> > In log/syslog this appears:
> >
> >Apr 7 16:52:34 bulletin shibboleth-sp: 1491573154 INFO
> Shibboleth.SessionCache FastCGI shibresponder: session
> > (_acfd0691263a720d3e1ce8ef5e3f4ba0) not yet bound to client address
> type, binding it to ()
>
> Hmm, that seems to suggest it's not getting a client address, and given
> that, there could be any number of other things wrong that would break the
> whole thing. Since it's an unsupported platform and packages, I'm not
> prepared to do much thinking about it beyond that. If the fundamental
> problem were that the subsequent request caused it to invalidate the
> session due to address mismatch, that would be in the log though, so this
> is something weirder than just that.
>
> > (I had to check from syslog because for some reason /var/log/shibboleth
> doesn't exist and shib is not logging even though I
> > havent touched shibd.logger etc)
>
> Then it would seem you have other problems too.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170420/19a15119/attachment.html>
More information about the users
mailing list