Help! One of our applications is not receiving attributes

[Melvin Lasky]

Hey Scott and Gary,
Thanks for the response! Scott, I’m not sure what it would be then? Anyhow,
that’s how we have it for all our CAS services. And it seems to work.

Anyhow, this was the answer from the developer:

“replaced the node package cas-authentication with express-auth-cas seems
to work.”

Thanks for all your help!

Have a great one!

*Melvin Lasky*
*Associate Director of Enterprise Architecture*
* <http://manhattan.edu/>*
Riverdale, NY 10471 <x-apple-data-detectors://4/0>
Phone: 718-862-7410
melvin.lasky at manhattan.edu
www.manhattan.edu

Sent from my iPad


On Aug 8, 2019, at 6:52 PM, Melvin Lasky <melvin.lasky at manhattan.edu> wrote:

We have many websites running on our Shibboleth instance. We are also part
of the incommon federation. Everything is working great. However, one of
in-house developed apps is not receiving attributes. I don’t see SHIB
sending them.

Any help would be greatly appreciated.

We have a regex, but in order to rule out any weirdness with the regex, I
have hardcoded the value in the attribute filter

<AttributeFilterPolicy id="releaseForIDApprovalTEST" >
  <PolicyRequirementRule xsi:type="Requester" value="
https://idapproval-test.wc.manhattan.edu/" />
        <AttributeRule attributeID="eduPersonPrincipalName"
permitAny="true"  />
        <AttributeRule attributeID="eduPersonScopedAffiliation"
permitAny="true" />
        <AttributeRule attributeID="employeeType" permitAny="true" />
        <AttributeRule attributeID="surname" permitAny="true" />
        <AttributeRule attributeID="givenName" permitAny="true" />
        <AttributeRule attributeID="mail" permitAny="true" />
        <AttributeRule attributeID="employeeNumber" permitAny="true" />
        <AttributeRule attributeID="uid" permitAny="true" />
</AttributeFilterPolicy>

But, I’m not seeing anything. Other attribute filters work no problem, etc
etc.

Here’s our log

shib-idp;idp-process.log;dev;nothing; - [149.61.2.59]2019-08-08
22:48:27,844 - INFO [Shibboleth-Audit.SSO:275] - 20190808T224827Z|||
https://idapproval-test.wc.manhattan.edu/|https://www.apereo.org/cas/protocol/login||||melvin.lasky|||melvin.lasky|ST
-AADXGZLDOJSXIMNMWOQQ6RCGW5R4WWD3EMQR44MVQDG5OMN7KVZZKFIRWH6SG2TPNMEQL35KYJW2JMWCZMKSN32PFHP5JMZDLDQ2NQUBWMNN4ML732H64ZA2H27M5KPD5SML3CMLCI2JGYYKPNH47WKRSHEV6ISD2DT2LWF2I2JCIJWMGLPJAK6DP7CKDZA2WAAWQFS4O6SA6MC2WOYV65FOYW2TG6JSJJKG2VN5L3KS3ZYJ6J5QTZ7YWWNFL6W67TRO7CWUAJXMZMROCTHZGGNEINYYJLAX5OQVMTDGBUZT2MZLSX2K3BUMVFBVLTZKZKG76AMBFHKRB7W55C4ZRAFNMZKK7DGV5FKQRMPBALK3M2XXK4UISJXZ2ED4WUDZIXKO6---|
shib-idp;idp-process.log;dev;nothing; - [149.61.2.59]2019-08-08
22:48:27,908 - INFO
[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:117] - Successfully
validated
ST-AADXGZLDOJSXIMNMWOQQ6RCGW5R4WWD3EMQR44MVQDG5OMN7KVZZKFIRWH6SG2TPNMEQL35KYJW2JMWCZMKSN32PFHP5JMZDLDQ2NQUBWMNN4ML732H64ZA2H27M5KPD5SML3CMLCI2JGYYKPNH47WKRSHEV6ISD2DT2LWF2I2JCIJWMGLPJAK6DP7CKDZA2WAAWQFS4O6SA6MC2WOYV65FOYW2TG6JSJJKG2VN5L3KS3ZYJ6J5QTZ7YWWNFL6W67TRO7CWUAJXMZMROCTHZGGNEINYYJLAX5OQVMTDGBUZT2MZLSX2K3BUMVFBVLTZKZKG76AMBFHKRB7W55C4ZRAFNMZKK7DGV5FKQRMPBALK3M2XXK4UISJXZ2ED4WUDZIXKO6---
for https://idapproval-test.wc.manhattan.edu/
shib-idp;idp-process.log;dev;nothing; - [35.194.79.151]2019-08-08
22:48:27,916 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A
non-proceed event occurred while processing the request: TicketNotFromRenew
shib-idp;idp-warn.log;dev;nothing;2019-08-08 22:48:27,916 - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
occurred while processing the request: TicketNotFromRenew
shib-idp;idp-audit.log;dev;nothing;[35.194.79.151] - 20190808T224827Z|||
https://idapproval-test.wc.manhattan.edu/|https://www.apereo.org/cas/protocol/serviceValidate||||||||ST
-AADXGZLDOJSXIMNMWOQQ6RCGW5R4WWD3EMQR44MVQDG5OMN7KVZZKFIRWH6SG2TPNMEQL35KYJW2JMWCZMKSN32PFHP5JMZDLDQ2NQUBWMNN4ML732H64ZA2H27M5KPD5SML3CMLCI2JGYYKPNH47WKRSHEV6ISD2DT2LWF2I2JCIJWMGLPJAK6DP7CKDZA2WAAWQFS4O6SA6MC2WOYV65FOYW2TG6JSJJKG2VN5L3KS3ZYJ6J5QTZ7YWWNFL6W67TRO7CWUAJXMZMROCTHZGGNEINYYJLAX5OQVMTDGBUZT2MZLSX2K3BUMVFBVLTZKZKG76AMBFHKRB7W55C4ZRAFNMZKK7DGV5FKQRMPBALK3M2XXK4UISJXZ2ED4WUDZIXKO6---|
shib-idp;idp-process.log;dev;nothing; - [35.194.79.151]2019-08-08
22:48:27,917 - INFO [Shibboleth-Audit.SSO:275] - 20190808T224827Z|||
https://idapproval-test.wc.manhattan.edu/|https://www.apereo.org/cas/protocol/serviceValidate||||||||ST
-AADXGZLDOJSXIMNMWOQQ6RCGW5R4WWD3EMQR44MVQDG5OMN7KVZZKFIRWH6SG2TPNMEQL35KYJW2JMWCZMKSN32PFHP5JMZDLDQ2NQUBWMNN4ML732H64ZA2H27M5KPD5SML3CMLCI2JGYYKPNH47WKRSHEV6ISD2DT2LWF2I2JCIJWMGLPJAK6DP7CKDZA2WAAWQFS4O6SA6MC2WOYV65FOYW2TG6JSJJKG2VN5L3KS3ZYJ6J5QTZ7YWWNFL6W67TRO7CWUAJXMZMROCTHZGGNEINYYJLAX5OQVMTDGBUZT2MZLSX2K3BUMVFBVLTZKZKG76AMBFHKRB7W55C4ZRAFNMZKK7DGV5FKQRMPBALK3M2XXK4UISJXZ2ED4WUDZIXKO6---|
shib-idp;idp-audit.log;dev;nothing;[149.61.234.126] - 20190808T224832Z|||
https://lms.manhattan.edu/login/|https://www.apereo.org/cas/protocol/login|||||||||

If you need any other information, just let me know.

Thanks for all your help!

Hopefully we can get to the bottom of this!

Have a great day / night!

*Melvin Lasky*
*Associate Director of Enterprise Architecture*

<email_logo.jpg>



Riverdale, NY 10471
Phone: 718-862-7410
melvin.lasky at manhattan.edu
www.manhattan.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190808/1e6d8369/attachment.html>