aacli attributes are empty

ddson dd.son6 at gmail.com
Mon Jul 8 14:13:58 EDT 2019


Hi,
I'm new to shibboleth, so plz be patient.

I installed and configured shibboleth Idp to use an ldap. Once I finished, I
tested it with the aacli and the output of the attributes is empty.

Everything seemed fine in the idp-warn.log, it just said that couldn't find
the sp metadata, but since I'm using the aacli I assume that fine.

So I go to the idp-process and it seamms that it finds the user:


2019-07-08 18:42:34,260 - 127.0.0.1 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:416] -
Attribute Resolver 'ShibbolethAttributeResolver': Data connector 'myLDAP'
resolved the following attributes: [uid, entryDN]
2019-07-08 18:42:34,261 - 127.0.0.1 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:461] -
Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving
dependencies for 'uid'
2019-07-08 18:42:34,262 - 127.0.0.1 - DEBUG
[net.shibboleth.idp.attribute.resolver.AbstractAttributeDefinition:264] -
Attribute Definition 'uid': produced an attribute with the following values
[StringAttributeValue{value=jdoe}]
2019-07-08 18:42:34,264 - 127.0.0.1 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:339] -
Attribute Resolver 'ShibbolethAttributeResolver': Attribute definition 'uid'
produced an attribute with 1 values

but it seems that it resets this value later on:
2019-07-08 18:42:34,272 - 127.0.0.1 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:267] -
Attribute Resolver 'ShibbolethAttributeResolver': Final resolved attribute
collection: [uid]
2019-07-08 18:42:34,272 - 127.0.0.1 - DEBUG
[org.springframework.webflow.execution.ActionExecutor:53] - Finished
executing net.shibboleth.idp.profile.impl.ResolveAttributes at 3d565acb; result
= null
2019-07-08 18:42:34,273 - 127.0.0.1 - DEBUG
[org.springframework.webflow.execution.AnnotatedAction:149] - Clearing
action execution attributes map[[empty]]

Can somebody please help me understand why the attributes are empty? Or
don't I understand how the aacli is supposed to work?





--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list