Differences in default output format from resolvertest endpoint
Peter Schober
peter.schober at univie.ac.at
Wed Jun 26 10:18:14 EDT 2019
* Max Spicer <max.spicer at york.ac.uk> [2019-06-26 16:11]:
> I am using the /idp/profile/admin/resolvertest endpoint (
> https://wiki.shibboleth.net/confluence/display/IDP30/AACLI) for attribute
> resolution tests. I'm calling the endpoint on the machine running the IdP
> as follows:
>
> curl --insecure 'https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar'
Any reason to do it that way vs. using bin/aacli.sh?
With aacli I'd also use the --saml2 parameter to see the actual XML,
not just someone's idea of what to leave out for a "simple" display.
> They are built and configured entirely using puppet and so *should*
> have identical configuration.
I wouldn't make any statements based on that simplified output.
Looking at the XML it should be clear whether the attribute values are
correct or not, though.
-peter
More information about the users
mailing list