LDAP + IdP attribute issues

[Jeffrey Crawford]

Two quick things, one I noticed that there is an entry
"returnAttributes=[*+]" which looks like one string of "*+" instead of two
distinct requested attributes of "*" and "+" separated by a space, so if
that's the case you are probably not getting any attributes back from the
search other than dn which is always returned (I think).

also I want to point out that on the SP side i think by default both uid
and sn are commented out in the /etc/shibboleth/attribute-map.xml file so
even if you do send them, the SP still has to decode them.

Hope that helps

Jeffrey E. Crawford
Enterprise Service Team <jeffreyc at ucsc.edu>
    ^         ^
   / \  ^    / \    ^
  /   \/ \  /   \  / \
 /        \/     \/   \
/                      \

You have been assigned this mountain to prove to others that it *can* be
moved.

On Tue, Aug 8, 2017 at 2:03 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> There is nothing about attribute resolution in either of the logs you
> posted. The attribute resolver itself doesn't log much of anything on INFO,
> so you're basically seeing nothing of relevance here to debug an attribute
> issue other than a lack of actual errors.
>
> The logs are full of noise of immaterial bits of LDAP connectivity, which
> you should turn down if you want to get anything useful out when it's
> turned up.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170811/d2426f64/attachment.html>