<div>Hi again.</div><br><div class="gmail_quote">On Wed Dec 03 2014 at 3:19:03 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 12/3/14, 8:06 PM, "Jerry B. Altzman" <<a href="mailto:jbaltz@gmail.com" target="_blank">jbaltz@gmail.com</a>> wrote:<br>
><br>
>So all this means...that shibd is getting the XML, and unpacking it, and<br>
>then not knowing what to do with the mapping?<br>
It's possible. It doesn't do anything unless it's told to, it doesn't<br>
automatically handle any Attribute it sees because it doesn't know what<br>
you want to call it.<br></blockquote><div><br></div><div>Right, I totally got that. That's why I uncommented pretty much everything, in order to try to capture something.</div><div><br></div><div>I know that in the XML I am getting from testshib (from which I posted a snippet) I get the uid attribute sent along. That appears in my shibd.log file.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Ok, so you see how there's nothing there under the attributes being<br>
cached? That means you didn't map anything that was found in the<br>
assertion. If there are attributes in it you didn't map, it will log that<br>
it skipped them. It won't log anything for a mapping rule that doesn't<br>
happen to correspond to anything it saw. But either way, there's no<br>
overlap at the moment between what testshib sent and what you mapped.<br></blockquote><div><br></div><div>This is why I am so confused. I thought I had them in my attribute-map.xml (from which I posted a snippet). So it sounds like: I am doing it all right, and the nasal demons are infecting me. </div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Then all I can tell is what's above. If Kevin's around, or if there's a<br>
document somewhere on the site, it would help to know what testshib<br>
actually sends, but you should see that in the XML in the log, and you<br>
*must* have log lines noting that it's ignoring certain attributes it's<br>
seeing.<br></blockquote><div><br></div><div>I don't see it saying it ignores anything.</div><div>C:\Program Files\shibboleth-sp\var\log\shibboleth>find /i "ignore" shibd.log</div><div><br></div><div>---------- SHIBD.LOG</div><div>2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building SecurityPolicyRule of type Ignore</div><div>2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building SecurityPolicyRule of type Ignore</div><div>2014-12-03 15:05:50 INFO OpenSAML.SecurityPolicyRule.Conditions : building SecurityPolicyRule of type Ignore </div><div> </div><div>OK, time to wave the dead chicken over this.</div><div><br></div><div>Thanks for the pointers!</div><div><br></div><div>//jbaltz</div></div>