ConsentConfiguration , consent intercept not showing up in IDP v4.1
Jehan PROCACCIA
jehan.procaccia at tem-tsp.eu
Wed Jun 9 19:21:58 UTC 2021
yes the module is enabled
[shibboleth-idp]# bin/module.sh
Module: idp.authn.Duo [DISABLED]
Module: idp.authn.External [ENABLED]
Module: idp.authn.Function [DISABLED]
Module: idp.authn.IPAddress [DISABLED]
Module: idp.authn.MFA [DISABLED]
Module: idp.authn.Password [ENABLED]
Module: idp.authn.RemoteUser [DISABLED]
Module: idp.authn.RemoteUserInternal [DISABLED]
Module: idp.authn.SPNEGO [DISABLED]
Module: idp.authn.X509 [DISABLED]
Module: idp.authn.Demo [DISABLED]
Module: idp.admin.Hello [ENABLED]
Module: idp.admin.UnlockKeys [DISABLED]
Module: idp.intercept.Consent [ENABLED]
Module: idp.intercept.ContextCheck [DISABLED]
Module: idp.intercept.ExpiringPassword [DISABLED]
Module: idp.intercept.Impersonate [DISABLED]
Module: idp.intercept.Warning [DISABLED]
Module: idp.profile.CAS [DISABLED]
Regarding Logs I am already in debug , how can I search for consent "flow" ?
[shibboleth-idp]# grep -i consent logs/idp-process.log
=> nothing ...
is it the correct keyword to grep for ?
The logs ends loke this, we can clearly see attributes beeing sent
2021-06-09 20:18:06,590 - 157.157.100.19 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:89] - Profile Action RecordResponseComplete: Record response complete
2021-06-09 20:18:06,591 - 157.157.100.19 - INFO [Shibboleth-Audit.SSO:283] - 157.157.100.19|2021-06-09T19:17:58.169953Z|2021-06-09T19:18:06.591442Z|teststud|https://sptest.domain.fr/shibboleth|_634ac87fc33e3f3b06818d863a36a8f4|password|2021-06-09T19:18:06.025274Z| supannEntiteAffectation,mail,eduPersonAffiliation,displayName,givenName,eduPersonPrincipalName,supannAutreMail,sn |AAdzZWNyZXQxjMTd9GC7h6AQ7CAxiSnUn6V6nKvkS0X9R52LtFTG5VSc3GAMnHHwhTjfDkoisdFRx4BlEJ1lT2rAhQhKfij+CNx+PnsKstkLGqOEWEV9DioxQp2UT8runiKBUVFXgwuh9B33yVAd0w==|transient|false|false||Redirect|POST||Success||8a05dc71cc6fd28e62a2c3633448f3bea173bf48bc798581879d12a25642c5a5|Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4530.5 Safari/537.36
Thanks .
De: "Tom Zeller" <tzeller at dragonacea.biz>
À: "users" <users at shibboleth.net>
Envoyé: Mercredi 9 Juin 2021 20:52:48
Objet: Re: ConsentConfiguration , consent intercept not showing up in IDP v4.1
did I missed something ?
Looks ok to me.
I suggest confirming that the consent module is loaded (using
bin/module.sh or bin/status.sh or the status page).
Setting the log level for net.shibboleth.idp.consent to DEBUG should
help troubleshoot.
Tom
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210609/4961c9c8/attachment.htm>
More information about the users
mailing list