uid attribute encoding

[Bryan K. Walton]

When I run the uid through aacli with --saml2, I get the following:

[root at idp-test shibboleth-idp]# /opt/shibboleth-idp/bin/aacli.sh -n bwalton --saml2 -r https://<url> -u http://localhost:8080/idp
<?xml version="1.0" encoding="UTF-8"?><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_63a6b92e86bf374eb1c14c343366bc4e" IssueInstant="2022-02-24T16:29:56.196Z" Version="2.0">
    <saml2:Subject>
        <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idp-test.leepfrog.com/idp/shibboleth" SPNameQualifier="https://<url>">AAdzZWNyZXQx2b9sp77jt95ar+IJmKNytqjl+dEuKO39A57a87S8kkTPxe0BT17iEJAmUkHzZfZyYCUXduSwqEc5/S1rPFRq5bVdUj712/aOFrFzKRyRDzqIcCKzrk12mc+Vu9piuybCJSZtZUmOIVBvTcdcubAbhLAuT4YzocVWSmBbun6vaLM=</saml2:NameID>
    </saml2:Subject>
</saml2:Assertion>

This value is what they are seeing as the attribute.  Do I need to
configure something to make it not do this, so that bwalton comes across
to the SP as bwalton?

-Bryan



On Thu, Feb 24, 2022 at 10:20:21AM -0600, Bryan K. Walton via users wrote:
> On Thu, Feb 24, 2022 at 04:14:17PM +0000, Matthew Slowe via users wrote:
> > 
> > "AAdzZWNyZXQxy1bOAaCA9D1blv" decodes to:
> > 
> > 00000000: 0007 7365 6372 6574 31cb 56ce 01a0 80f4  ..secret1.V.....
> > 00000010: 3d5b                                     =[
> > 
> > Which doesn't look much like your uid :-)
> 
> Thanks.  I didn't actually paste the entire string. :-)
> 
> > It's worth checking the idp-process.log to see what's going out (you may
> > need to crank up the logging to DEBUG to see it) - it may be sufficient to
> > use "aacli" with the "--saml2" flag to generate an unencrypted assertion...
> > I doubt Shibboleth is generating this.
> 
> Thanks, I'll check this out.
> 
> -Bryan
> -- 
> For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
Bryan K. Walton                                           319-337-3877 
Linux Systems Administrator                 Leepfrog Technologies, Inc