Thanks for getting back to me. The saml prefix is indeed defined based on the smal2 namespace. Also, I did see in the logs what looks like the encrypted attributes getting unpacked:<div><br></div><div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: saml:EncryptedAttribute</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element (saml:EncryptedAttribute)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (saml:EncryptedAttribute)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child nodes of DOM element (saml:EncryptedAttribute)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: {<a href="http://www.w3.org/2001/04/xmlenc#}EncryptedData">http://www.w3.org/2001/04/xmlenc#}EncryptedData</a></div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element ({<a href="http://www.w3.org/2001/04/xmlenc#}EncryptedData">http://www.w3.org/2001/04/xmlenc#}EncryptedData</a>)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (EncryptedData)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling attributes for DOM element (EncryptedData)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: processing generic attribute</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: processing generic attribute</div>
<div><br></div><div>...</div><div><br></div><div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: {<a href="http://www.w3.org/2001/04/xmlenc#}CipherData">http://www.w3.org/2001/04/xmlenc#}CipherData</a></div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element ({<a href="http://www.w3.org/2001/04/xmlenc#}CipherData">http://www.w3.org/2001/04/xmlenc#}CipherData</a>)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (CipherData)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child nodes of DOM element (CipherData)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: {<a href="http://www.w3.org/2001/04/xmlenc#}CipherValue">http://www.w3.org/2001/04/xmlenc#}CipherValue</a></div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element ({<a href="http://www.w3.org/2001/04/xmlenc#}CipherValue">http://www.w3.org/2001/04/xmlenc#}CipherValue</a>)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (CipherValue)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child nodes of DOM element (CipherValue)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: processing text content at position (0)</div><div>
2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: {<a href="http://www.w3.org/2001/04/xmlenc#}CipherData">http://www.w3.org/2001/04/xmlenc#}CipherData</a></div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element ({<a href="http://www.w3.org/2001/04/xmlenc#}CipherData">http://www.w3.org/2001/04/xmlenc#}CipherData</a>)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (CipherData)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child nodes of DOM element (CipherData)</div><div>
2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject.Builder [1]: located XMLObjectBuilder for element name: {<a href="http://www.w3.org/2001/04/xmlenc#}CipherValue">http://www.w3.org/2001/04/xmlenc#}CipherValue</a></div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child element ({<a href="http://www.w3.org/2001/04/xmlenc#}CipherValue">http://www.w3.org/2001/04/xmlenc#}CipherValue</a>)</div>
<div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling DOM element (CipherValue)</div><div>2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: unmarshalling child nodes of DOM element (CipherValue)</div><div>
2012-07-20 17:21:50 DEBUG XMLTooling.XMLObject [1]: processing text content at position (0)</div></div><div><br></div><div>and then after the last one of those, I see:</div><div><br></div><div>012-07-20 17:22:02 INFO Shibboleth.Listener [1]: detected socket closure, shutting down worker thread</div>
<div><br></div><div>I don't see any actual errors anywhere, but I do know from looking at the transaction log that none of the encrypted data is being used for anything (the transaction log shows no activity). Do I have to do something on the Attribute definitions (in my extractor) to tell them to decrypt attributes, or does that happen automagically?</div>
<div><br></div><div>Thanks,</div><div><br></div><div>Rob</div><br><div class="gmail_quote">On Fri, Jul 20, 2012 at 12:54 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">> So there appear to be attributes, but my SP is unable to decrypt them. From<br>
> reading the docs, I found that the <AttributeExtractor> will support<br>
> <saml2:EncryptedAttribute> elements, but I see we are getting<br>
> <saml:EncryptedAttribute>. Could this be causing us to not properly handle<br>
> the elements?<br>
<br>
</div>No, not unless that prefix isn't declared somewhere to be the right namespace. If it's not handling them, there should be logs indicating why, but I don't know that this has ever been tested. I can't recall whether I ever tried it in an interop event, and the IdP we have doesn't support the feature (only at the assertion level).<br>
<div class="im"><br>
> Also, on ApplicationDefaults, I have encrypted=true (which I<br>
> think only applies to outbound messages though)<br>
<br>
</div>It does.<br>
<div class="im"><br>
> PS: I would like to add that of all the open source message boards I have<br>
> used, the shib folks respond the fastest, hands down. Thank you for that.<br>
<br>
</div>Thank you for noticing.<br>
<br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>