IdP does not release attributes

[Riebeling, Sebastian]

Hello,


I am currently trying to set up an IdP and SP on a Debian machine. The credentials are stored and provided by an LDAP Server. I can successfully log-in, but the IdP doesen't release any attribute. The list on /Shibboleth.sso/Session and the transaction.log file from the SP show no incoming attributes.  I think my SP configuration should be ok. I tested it with testshib.org and their attributes are in the SPs transaction.log.

At the moment I am just trying to release one easy Attribute to my SP which is not even stored in LDAP. (In my understanding this is the username I type into the log-in form on the webpage, isn't it?)


from "attribute-resolver.xml":


 <resolver:AttributeDefinition id="uid" xsi:type="ad:PrincipalName">
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" />
    </resolver:AttributeDefinition>




The first times the IdP "warned" me that it will release other informations to the SP than last time and I had to accept this info, but nevertheless the transaction.log stays empty.

I use the standard "attribute-filter.xml" file and only changed the value to my SP (and the id):


<!-- Release some attributes to an SP. -->
    <AttributeFilterPolicy id="SSOMED">
        <PolicyRequirementRule xsi:type="Requester" value="https://sso-med1.imib.rwth-aachen.de" />

        <AttributeRule attributeID="eduPersonPrincipalName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="uid">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

        <AttributeRule attributeID="mail">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>
    </AttributeFilterPolicy>



Do I have to change other things for a basic attribute release? Do you need the whole file or other files to help me?

It is my first time working with Shibboleth and I actually don't have any experience in this field at all. So I would be glad for any tips and recommendations you can give me.


Thank you for your time and I hope you can help me.



kind regards,

Sebastian


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170729/f8b18efc/attachment.html>