3.4.8 warning

[Donald Lohr]

This is an IdP that started out in the 1.3 days, upgraded to several 2.x 
versions and several 3x versions and now up to 3.4.8.

Over the years there have been numerous admins that have come and gone 
and had their own level of knowledge and way of approaching how to 
configure SPs.

It seems, I'm likely up for another goose chase to solve this one as 
I've experienced since being assigned the responsibility on our IdP.

I am not aware of any CAS SPs, I've seen reference of what seems like a 
CAS service running from evidence in the logs, but have not researched 
or verified that one.

How would I begin to find if we are "running promiscuously with SSO 
enabled for unverified relying parties" ?


Thanks,
Don

On 7/29/21 1:45 PM, Cantor, Scott wrote:
> CAUTION: This email originated from outside of JMU. Do not click links or open attachments unless you recognize the sender and know the content is safe.
> ________________________________
>
> On 7/29/21, 1:41 PM, "users on behalf of Donald Lohr" <users-bounces at shibboleth.net on behalf of lohrda at jmu.edu> wrote:
>
>>     Thanks, Does the AttributeFilterPolicyGroup wording in the error point
>>     to an issue in the attribute-filter.xml file?
> The issue is with the policy in the file and the circumstances under which it's running with no metadata on hand. I don't know of a situation that would ever occur that wouldn't have metadata available unless the IdP is handling a CAS request, or is running promiscuously with SSO enabled for unverified relying parties, in which case the reason for the warning should be self-evident.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__shibboleth.atlassian.net_wiki_x_ZYEpPw&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=n-GYEZX62-zMQJ8y2ADAN4mLL1583cSiXfMbdkeQh-I&s=AcpYMAP7-Y_LL30fRhik9HduRYvI3UbrhqkDJIg8p9g&e=
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0