uid attribute encoding

[Bryan K. Walton]

On Thu, Feb 24, 2022 at 04:14:17PM +0000, Matthew Slowe via users wrote:
> 
> "AAdzZWNyZXQxy1bOAaCA9D1blv" decodes to:
> 
> 00000000: 0007 7365 6372 6574 31cb 56ce 01a0 80f4  ..secret1.V.....
> 00000010: 3d5b                                     =[
> 
> Which doesn't look much like your uid :-)

Thanks.  I didn't actually paste the entire string. :-)

> It's worth checking the idp-process.log to see what's going out (you may
> need to crank up the logging to DEBUG to see it) - it may be sufficient to
> use "aacli" with the "--saml2" flag to generate an unencrypted assertion...
> I doubt Shibboleth is generating this.

Thanks, I'll check this out.

-Bryan