Attribute release consent failing (sometimes)
Manuel Haim
haim at hrz.uni-marburg.de
Thu Sep 21 11:24:11 EDT 2017
Hi Tom,
On 13.09.2017 22:37 Tom Zeller wrote:
> With n.s.i.consent.flow.impl.ExtractConsent at debug, there should be
> lines in idp-process.log that look like : [...]
oh, it seems that I tried to configure the logger within the
idp.properties file (as it was included within the logback.xml file).
Now that I configured it correctly within logback.xml, I can see
additional debug output in idp-process.log.
Here is the debug output for a failing consent:
2017-09-21 16:01:11,586 - DEBUG
[net.shibboleth.idp.consent.flow.impl.ExtractConsent:81] - Profile
Action ExtractConsent: Extracted consent ids
'[["uid","eduPersonScopedAffiliation","eduPersonEntitlement","UniMrLinkToPeople"]]'
from request parameter '_shib_idp_consentIds'
2017-09-21 16:01:11,587 - DEBUG
[net.shibboleth.idp.consent.flow.impl.ExtractConsent:93] - Profile
Action ExtractConsent: Consent context
'ConsentContext{previousConsents={}, chosenConsents={uid=Consent{id=uid,
value=uxC/yjVxnyTNxxpWA5+THwS3bM9UtFLEg2mIJ28VRiw=, isApproved=false},
eduPersonScopedAffiliation=Consent{id=eduPersonScopedAffiliation,
value=E2mLrN74C6pSz08GRnpRDxdWw5Tl0zxSpFu7+ka0dWM=, isApproved=false},
eduPersonEntitlement=Consent{id=eduPersonEntitlement,
value=x7wtAxaDrz4H9nu67g7puu14HK79scDoXKXNppyUJk8=, isApproved=false},
UniMrLinkToPeople=Consent{id=UniMrLinkToPeople,
value=sgVy8m8WlL3yTx07qBUkfUQFq+b9FTda6SE6gTyLO9k=, isApproved=false}}}'
I am also starting to log the Referer and User-Agent headers on my load
balancer now, so maybe I can find the culprit browsers.
Kind regards,
Manuel
More information about the users
mailing list