<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><p class="MsoNormal">Thanks Scott, We fixed the attribute-map and then we
started getting the values. However our operations team has the following
to say about SSL:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">"As a standard for all encrypted web connections SSL
certificates are terminated at the F5 load balancer, which make cert management
easier for large environments. Please check with Shibboleth developers/support
if its possible to patch shibboleth to allow for such a setup to work, this
will allow for us to continue to terminate certs on the F5, or is this not an
option."<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please let us know your thoughts. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks again!<o:p></o:p></p>
<p class="MsoNormal">Jayashree<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p><br><div><div id="SkyDrivePlaceholder"></div><hr id="stopSpelling">From: cantor.2@osu.edu<br>To: users@shibboleth.net<br>CC: users@shibboleth.net<br>Subject: Re: Adding SAML2 ACS points does not seem to map attributes from SAML2 IDP<br>Date: Tue, 2 Oct 2012 03:19:11 +0000<br><br>
<div>On Oct 1, 2012, at 3:47 PM, "Jayashree Ravi" <<a href="mailto:jravi123@hotmail.com">jravi123@hotmail.com</a>> wrote:</div>
<div><br>
</div>
<blockquote><style><!--
.ExternalClass .ecxhmmessage P
{padding:0px;}
.ExternalClass body.ecxhmmessage
{font-size:12pt;font-family:Calibri;}
--></style>
<div dir="ltr">
<div>2. We also have not enabled SSL between our loadbalancer and Apache/Shibboleth and we do have warning messages in shibd_warn.log </div>
</div>
</blockquote>
<div><br>
</div>
You are using SSL with the client, so there is no reason to use settings permitting http client access. The warnings are accurate and should be listened to if you allow only https access to your site. <br>
<div><br>
</div>
<div>-- Scott</div>
<br>--
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</div> </div></body>
</html>