ConsentConfiguration , consent intercept not showing up in IDP v4.1

Jehan PROCACCIA jehan.procaccia at tem-tsp.eu
Wed Jun 9 19:21:58 UTC 2021


yes the module is enabled 

[shibboleth-idp]# bin/module.sh 
Module: idp.authn.Duo [DISABLED] 
Module: idp.authn.External [ENABLED] 
Module: idp.authn.Function [DISABLED] 
Module: idp.authn.IPAddress [DISABLED] 
Module: idp.authn.MFA [DISABLED] 
Module: idp.authn.Password [ENABLED] 
Module: idp.authn.RemoteUser [DISABLED] 
Module: idp.authn.RemoteUserInternal [DISABLED] 
Module: idp.authn.SPNEGO [DISABLED] 
Module: idp.authn.X509 [DISABLED] 
Module: idp.authn.Demo [DISABLED] 
Module: idp.admin.Hello [ENABLED] 
Module: idp.admin.UnlockKeys [DISABLED] 
Module: idp.intercept.Consent [ENABLED] 
Module: idp.intercept.ContextCheck [DISABLED] 
Module: idp.intercept.ExpiringPassword [DISABLED] 
Module: idp.intercept.Impersonate [DISABLED] 
Module: idp.intercept.Warning [DISABLED] 
Module: idp.profile.CAS [DISABLED] 

Regarding Logs I am already in debug , how can I search for consent "flow" ? 

[shibboleth-idp]# grep -i consent logs/idp-process.log 
=> nothing ... 
is it the correct keyword to grep for ? 

The logs ends loke this, we can clearly see attributes beeing sent 

2021-06-09 20:18:06,590 - 157.157.100.19 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:89] - Profile Action RecordResponseComplete: Record response complete 
2021-06-09 20:18:06,591 - 157.157.100.19 - INFO [Shibboleth-Audit.SSO:283] - 157.157.100.19|2021-06-09T19:17:58.169953Z|2021-06-09T19:18:06.591442Z|teststud|https://sptest.domain.fr/shibboleth|_634ac87fc33e3f3b06818d863a36a8f4|password|2021-06-09T19:18:06.025274Z| supannEntiteAffectation,mail,eduPersonAffiliation,displayName,givenName,eduPersonPrincipalName,supannAutreMail,sn |AAdzZWNyZXQxjMTd9GC7h6AQ7CAxiSnUn6V6nKvkS0X9R52LtFTG5VSc3GAMnHHwhTjfDkoisdFRx4BlEJ1lT2rAhQhKfij+CNx+PnsKstkLGqOEWEV9DioxQp2UT8runiKBUVFXgwuh9B33yVAd0w==|transient|false|false||Redirect|POST||Success||8a05dc71cc6fd28e62a2c3633448f3bea173bf48bc798581879d12a25642c5a5|Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4530.5 Safari/537.36 

Thanks . 



De: "Tom Zeller" <tzeller at dragonacea.biz> 
À: "users" <users at shibboleth.net> 
Envoyé: Mercredi 9 Juin 2021 20:52:48 
Objet: Re: ConsentConfiguration , consent intercept not showing up in IDP v4.1 



did I missed something ? 



Looks ok to me. 

I suggest confirming that the consent module is loaded (using 
bin/module.sh or bin/status.sh or the status page). 

Setting the log level for net.shibboleth.idp.consent to DEBUG should 
help troubleshoot. 

Tom 
-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210609/4961c9c8/attachment.htm>


More information about the users mailing list