<div dir="ltr"><div><br></div><div><br></div><div>Hi</div><div><br></div><div>I am trying to get shibboleth to talk to a vendors IdP. I am having troubles. Admittedly I am unexperienced but somehow I got the shibboleth to work with three different IdP's.</div>
<div><br></div><div>The problem is that I am not getting any of the user information back from the IdP. After turning up the logging I found this:</div><div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: About to connect() to <a href="http://aaa.bbb.cc">aaa.bbb.cc</a> port 443 (#0)</div>
<div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: Trying xxx.xxx.xxx.xxx...</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: connected</div><div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: Connected to aaa.bbb.ccc (xxx.xxx.xxx.xxx) port 443 (#0)</div>
<div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: Initializing NSS with certpath: sql:/etc/pki/nssdb</div><div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: Unknown cipher in list: ALL:!aNULL:!LOW:!EXPORT:!SSLv2</div>
<div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: NSS error -5978</div><div><br></div><div>2014-05-07 11:25:14 DEBUG XMLTooling.libcurl [4]: Closing connection #0</div><div><br></div><div>I am using centos 6.3 and I think that libcurl has ssl support compiled in so I dont think that recompiling anything will help. (But I could be wrong) Am I wrong?</div>
<div><br></div><div>Is this significant?:</div><div>curl-config --features</div><div>SSL</div><div>IPv6</div><div>libz</div><div>IDN</div><div>NTLM</div><div><br></div><div>curl-config --protocols</div><div>HTTP</div><div>
HTTPS</div><div>FTP</div><div>FTPS</div><div>FILE</div><div>TELNET</div><div>LDAP</div><div>LDAPS</div><div>DICT</div><div>TFTP</div><div>SCP</div><div>SFTP</div><div><br></div><div>Anyway I was told by the IdP vendor that I might have a way to avoid this all together by getting the user attributes the IdP sends me rather than asking for them seperately. This is what I need help with. This is what is happening now:</div>
<div><br></div><div>2014-05-07 11:25:14 DEBUG Shibboleth.SSO.SAML2 [4]: extracting pushed attributes...</div><div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeExtractor.XML [4]: unable to extract attributes, unknown XML object type: saml2p:Response</div>
<div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeExtractor.XML [4]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)</div><div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeExtractor.XML [4]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement</div>
<div>2014-05-07 11:25:14 DEBUG Shibboleth.SSO.SAML2 [4]: resolving attributes...</div><div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeResolver.Query [4]: attempting SAML 2.0 attribute query</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject.Builder [4]: located XMLObjectBuilder for element name: saml2:NameID</div>
<div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: unmarshalling DOM element (saml2:NameID)</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: unmarshalling attributes for DOM element (saml2:NameID)</div>
<div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: processing generic attribute</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: processing generic attribute</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: processing generic attribute</div>
<div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: unmarshalling child nodes of DOM element (saml2:NameID)</div><div>2014-05-07 11:25:14 DEBUG XMLTooling.XMLObject [4]: processing text content at position (0)</div><div>
<br></div><div>Are these the problems?</div><div><br></div><div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeExtractor.XML [4]: unable to extract attributes, unknown XML object type: saml2p:Response</div><div>2014-05-07 11:25:14 DEBUG Shibboleth.AttributeExtractor.XML [4]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement</div>
<div><br></div><div><br></div><div>Is there more information I could provide to be useful?</div><div><br></div><div>Thanks,</div><div>Ben Marsh</div></div>