Differences in default output format from resolvertest endpoint

[Max Spicer]

Hi,

I am using the /idp/profile/admin/resolvertest endpoint (
https://wiki.shibboleth.net/confluence/display/IDP30/AACLI) for attribute
resolution tests. I'm calling the endpoint on the machine running the IdP
as follows:

curl --insecure '
https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar
'

I've noticed that running the above command on my local test vm gives
differently-formatted output to the exact same command on my real test IdP.

local vm:
# curl --insecure '
https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar
'

{
"requester": "foo",
"principal": "bar",
"attributes": [


  {
    "name": "eduPersonTargetedID",
    "values": [
              "4rSNVLEHFZNkNZEQeTgfPcVvIhE="          ]
  },

  {
    "name": "eduPersonTargetedID.old",
    "values": [
              "4rSNVLEHFZNkNZEQeTgfPcVvIhE=@york.ac.uk"          ]
  }

]
}

test IdP:

# curl --insecure '
https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar
'

{
"requester": "foo",
"principal": "bar",
"attributes": [


  {
    "name": "eduPersonTargetedID",
    "values": [

"XMLObjectAttributeValue{value=org.opensaml.saml.saml2.core.impl.NameIDImpl at 1cfab44a}"
         ]
  },

  {
    "name": "eduPersonTargetedID.old",
    "values": [

"ScopedStringAttributeValue{value=4rSNVLEHFZNkNZEQeTgfPcVvIhE=, scope=
york.ac.uk}"          ]
  }

]
}

Note the differences in the values:
"4rSNVLEHFZNkNZEQeTgfPcVvIhE="
compared to
"XMLObjectAttributeValue{value=org.opensaml.saml.saml2.core.impl.NameIDImpl at 1cfab44a}"
and
"4rSNVLEHFZNkNZEQeTgfPcVvIhE=@york.ac.uk"
compared to
"ScopedStringAttributeValue{value=4rSNVLEHFZNkNZEQeTgfPcVvIhE=, scope=
york.ac.uk}".

Both of these boxes are running IdP 3.4.1 on openjdk 1.8.0_212 on fully
upgraded Ubuntu 16.04.6 LTS (4.4.0-151-generic) installations. They are
built and configured entirely using puppet and so *should* have identical
configuration.

Can anyone suggest what might be causing this difference between the two
installations?

Thanks,

Max Spicer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190626/1e908f02/attachment.html>