Trying to release new attribute funetEduPersonLearnerId

[Scott Alexander]

Hi,

No it was a virtual machine I cloned.

The VM I cloned from had exactly same problem. It was the production server. I cloned so I could turn on debug and test in peace without users filling up the logs.

And no restriction for ip addresses. It's getting all the other attributes fine just these new funetEduPerson attributes don't come

I discovered

/opt/shibboleth-idp/conf/attributes/ was missing a file containing

I added to  default-rules.xml

<import resource="funetEduperson.xml" />

which has all these elements

<bean parent="shibboleth.TranscodingProperties">
    <property name="properties">
        <props merge="true">
            <prop key="id">funetEduPersonLearnerId</prop>
            <prop key="transcoder">SAML2StringTranscoder</prop>
            <prop key="saml2.name">urn:oid:1.3.6.1.4.1.16161.1.1.27</prop>
            <prop key="displayName.en">LearnerId</prop>
        </props>
    </property>
</bean>

But still same problem .







Terveisin/Regards

Scott Alexander
Asiantuntija, järjestelmät Systems Specialist

Humak
Humanistinen ammattikorkeakoulu
University of Applied Sciences
www.humak.fi<http://www.humak.fi/>

Tel. +358 (0)50 411 9556

scott.alexander at humak.fi<mailto:scott.alexander at humak.fi>
________________________________
From: Alan Buxey <alan.buxey at myunidays.com>
Sent: 30 January 2025 16:27
To: Shib Users <users at shibboleth.net>
Cc: Scott Alexander <scott.alexander at humak.fi>
Subject: Re: Trying to release new attribute funetEduPersonLearnerId

You don't often get email from alan.buxey at myunidays.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
hi,

Is there some access control rule on the AD that only releases that attribute value from LDAP to the IP address of your original IdP and hence your clone doesn't receive it?

ala

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250130/5b6a4d38/attachment.htm>