Attribute filter warnings in the IdP log since installing the OIDC extension

Wessel, Keith kwessel at illinois.edu
Mon Sep 9 12:32:57 EDT 2019


Hi, all,

Before I take the logical route of telling logback to suppress these warnings from my log, I thought I'd ask here first in case my configuration is off and needs adjusting.

For nearly every authentication since adding the OIDC extension to our IdP, we see the following warnings in our IdP log. It's always the same attributes. I've tried to find out why these attributes: part of our default attribute release policy? Requested attributes for a SAML SP when the attributes also have OIDC encodings? I can't find a pattern that explains why these six every time. All of these do have OIDC encodings defined in my attribute resolver config, but so do others.

2019-09-09 11:17:47,196 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_3334e628922ae2b274f69a86b52fc2dd'  Filter failed. No values released for attribute 'eduPersonPrincipalName_idtoken'
2019-09-09 11:17:47,196 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_c8762a535d2a02a48665bb69bf7c1da9'  Filter failed. No values released for attribute 'eduPersonPrincipalName'
2019-09-09 11:17:47,197 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_454e683977c656efdaab497720e3fcd1'  Filter failed. No values released for attribute 'mail_idtoken'
2019-09-09 11:17:47,197 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_728ecff6c788256548343ca9792b85ad'  Filter failed. No values released for attribute 'mail'
2019-09-09 11:17:47,198 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_9a1bb86186d3a402f7c6fc6135b92606'  Filter failed. No values released for attribute 'displayName'
2019-09-09 11:17:47,198 - WARN [net.shibboleth.idp.attribute.filter.AttributeRule:175] - Attribute filtering engine '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeRule:_c17eb1466b8b6d8bffc58065eef10c45'  Filter failed. No values released for attribute 'uiucEduUIN'

Do I have something misconfigured that might be causing these warnings?

Thanks,
Keith



More information about the users mailing list