[EXTERNAL] Re: Missing Shibboleth attributes in $_Server
MARTINEZ, ARIEL
AMARTINEZ at hostos.cuny.edu
Thu Sep 24 14:21:59 UTC 2020
With confirmation that everything else was in order, I started going through things one at a time and found that the issue was the SSL certificate on the server. The private key had a password and while I knew that any server restart would require the password to be entered for apache to run, I was not aware that Shibboleth would have an issue with this. I removed the password and everything is working perfectly.
Thanks all!
-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Thursday, September 24, 2020 9:37 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: [EXTERNAL] Re: Missing Shibboleth attributes in $_Server
There's nothing there. Either you didn't access the server at all, or you turned up one category and not the root category or the one that might reveal something about the request evaluation process (the RequestMapper).
I would add that per the original question, it is not possible to just dump out data structures in any given language and see any data. The SP does not guarantee that works, and I know from personal experience in many languages that it does NOT. That just has to do with issues in the code of those languages because of how they decide what to show and where they get the data from.
The only thing that works consistently is directly accessing the variable you want.
If you have a Location rule for /secure, and you get prompted to login when you access that URL, and you see the attributes you expect at the /Session endpoint, then I absolutely guarantee there are variables that exist. But accessing them incorrectly or with the wrong names won't work.
I can't do anything else for you (see footer), but I don't want to see people wasting their time on blind alleys either.
-- Scott
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list