<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>Yes, we need to see the error. You'll need to approximate the same steps in production. We have to see the complete log info for that request that does not work. It has to show the initial authentication request, the login itself, the attribute resolution,
and the final saml response to the client. You might also provide some set up information about your production site. Whether you have multiple servers, load balancer, clustering in place, etc. All of those things matter.</div>
<div><br>
</div>
<div>
<div>
<div>-- </div>
<div><br>
</div>
</div>
<div>
<div>Paul Hethmon</div>
<div>Chief Software Architect</div>
<div>Clareity Security, LLC</div>
<div>o) 865.824.1350</div>
<div>c) 865.250.3517</div>
<div>e) paul.hethmon@clareitysecurity.com</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Daniele Russo <<a href="mailto:ruda76@gmail.com">ruda76@gmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Tue, 29 Nov 2011 14:53:03 +0100<br>
<span style="font-weight:bold">To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: null principal in attribute resolver<br>
</div>
<div><br>
</div>
<span id="result_box" class="" lang="en"><span class="hps">Hello</span> <span class="hps">
Paul, this</span> <span class="hps">error does not occur</span> <span class="hps">
to any request to</span> <span class="hps">login</span> <span class="hps">and above</span>
<span class="hps">only in</span> <span class="hps">production environment</span><span>.</span><br>
<span class="hps">I think you</span> <span class="hps">want to see the</span> <span class="hps">
logs when</span> <span class="hps">this error occurs</span><span>, or</span> <span class="hps">
am I wrong?<br>
Vuoi che seguo comunque le tue istruzioni?<br>
<br>
Thanks<br>
</span></span><br>
<div class="gmail_quote">2011/11/29 Paul Hethmon <span dir="ltr"><<a href="mailto:paul.hethmon@clareitysecurity.com">paul.hethmon@clareitysecurity.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>
<div>
<div>You need to follow these steps if you want any meaningful help:</div>
<div><br>
</div>
<div>1. Shut down the idp</div>
<div>2. Clear all logs</div>
<div>3. Turn on the idp</div>
<div>4. Wait until the idp fully starts, check the process.log</div>
<div>5. Do one login</div>
<div>6. Shut down the idp</div>
<div>7. Post the process.log file starting with the very first authentication request</div>
<div><br>
</div>
<div>You can look at the process.log file at step 4 and note the last line in it. Post everything past that point.</div>
<span class="HOEnZb"><font color="#888888">
<div><br>
</div>
<div>Paul</div>
<div><br>
<br>
</div>
</font></span></div>
</div>
<span></span></div>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</blockquote>
</div>
<br>
-- To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span>
</body>
</html>