Attribute filter warnings in the IdP log since installing the OIDC extension

Rod Widdowson rdw at steadingsoftware.com
Tue Sep 10 06:02:33 EDT 2019


> For nearly every authentication since adding the OIDC extension to our IdP, we see the following warnings in our IdP log. 

To confirm what Scott said, these warnings *do* matter.  

The situation is very distinct from a filter returning no values:  they indicate that a failure occurred during attribute filtering
and as a result the entire filter failed safe to "no release" (if it was a deny filter is would fail safe to "deny all").

You/we need to find out why the failure occurred, not least because the source of the failure should also be logging,  This lack of
previous warning at least requires a bug fix.

It would be useful to see what a log at debug of "net.shibboleth.idp.filter" says.

Thanks

	Rod



More information about the users mailing list