Shibboleth issue

Peter Schober peter.schober at univie.ac.at
Thu Nov 2 11:01:43 EDT 2017


* Dinesh Chaminda <dineshsecret at gmail.com> [2017-11-02 03:56]:
> I setup Shibboleth 2.5.0 in my IIS6, I'm getting below error

The SP v2.5.0 is now over 4 years old and suffers from 3 different
types of security issues:
https://wiki.shibboleth.net/confluence/display/SHIB2/SecurityAdvisories

Why not start with a current, supported release (2.6.0, currently)?

* Dinesh Chaminda <dineshsecret at gmail.com> [2017-11-02 14:39]:
> I had to change the attribute-map.xml file and the attribute policy file.
> Then the attributes exposed to the ASP.net app via Request.ServerVariables.

There should be no reason to update the attribute-policy.xml in order
to get ordinary string-valued attributes to pass through.

You do need to restart the SP, though, after updating your
attribute-map.xml

-peter


More information about the users mailing list