troubleshooting attribute release for idp 3.3.3

Nate Klingenstein ndk at
Sat Aug 25 01:02:12 EDT 2018


INFO is never going to provide you much information and it's more probable
that your issues are in the attribute filter.  Anyway, by increasing the
idp.loglevel.idp and idp.loglevel.ldap to DEBUG, you'll be able to see the
full set of attributes at each point in the process(look for an array at
the end of attribute resolution in particular) and their values.

Note that this is a significant privacy risk and you will never want to run
this way in production.

Take it easy,

On Sat, Aug 25, 2018 at 12:36 AM, Pablo Vidaurri <psvidaurri at>

> How can I troubleshoot attribute resolution and filtering? I'm expecting
> an attribute to be released but isn't for a set of users. I've set my
> logback.xml to INFO for ldap which isn't providing much but I see no
> filtering activity being logged which would be helpful aswell.
> I would like to see what attributes are found from ldap and db and which
> of those are being filtered.
> Thanks.
> -psv
> --
> For Consortium Member technical support, see
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list