Overloaded shibd questions

[Cantor, Scott]

On 5/19/21, 3:46 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>    I didn't think even a passive rule would pass along no attributes, but it's not implausible there might be such a
> code path since that approach implies it's ok not to have a session.

Just to close the loop: there is, but it's logged.

There are warnings in the authorization and exporting steps when it can't locate a session because of an exception raised (e.g. a ListenerException because shibd won't answer in time).

So it would not be hidden by any means, the log would be full of those.

But it will, if there's no rule in place to force it, just pass the request along undecorated.

-- Scott