Wups, of course, I have <br><div> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1" id="member"/></div><div><br></div><div>and I'm still not getting "member" or "Shib-member" environment variables...</div><div><br></div><div>//jbaltz </div><br><div class="gmail_quote">On Wed Dec 03 2014 at 2:39:52 PM Jerry B. Altzman <<a href="mailto:jbaltz@gmail.com">jbaltz@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br><br><div class="gmail_quote"></div><div class="gmail_quote">On Wed Dec 03 2014 at 2:27:05 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I don't know what testshib releases, but your logs will tell you exactly<br>
what you're getting or that you're skipping because there's no rule<br>
defined to extract it.<br></blockquote><div><br></div></div><div class="gmail_quote"><div>Right, and in fact, I see it in the shibd log -- which is why I'm convinced it's a shibd misconfig.</div></div><div class="gmail_quote"><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">>I do get:<br>
Then either you're not getting the attributes or you're not mapping them.<br></blockquote><div><br></div></div><div class="gmail_quote"><div>OK, well as grabbed from the log, I'm getting (for example)</div><div style="color:rgb(0,0,0);font-family:monospace;line-height:normal"><div><div><span><saml2:Attribute<span> <span>FriendlyName</span>="<span>uid</span>"</span><span> <span>Name</span>="<span>urn:oid:0.9.2342.19200300.100.1.1</span>"</span><span> <span>NameFormat</span>="<span>urn:oasis:names:tc:SAML:2.0:attrname-format:uri</span>"</span>></span></div><div style="margin-left:1em"><div><span><saml2:AttributeValue<span> <span>xmlns:xsi</span>="<span><a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span> <span>xsi:type</span>="<span>xs:string</span>"</span>></span><span>alterego</span><span></saml2:AttributeValue></span></div></div><div><span></saml2:Attribute></span></div></div></div><div style="color:rgb(0,0,0);font-family:monospace;line-height:normal"><div><div><span style="display:inline-block;width:10px;vertical-align:bottom;min-height:10px;background-repeat:no-repeat"></span><span><saml2:Attribute<span> <span>FriendlyName</span>="<span>eduPersonAffiliation</span>"</span><span> <span>Name</span>="<span>urn:oid:1.3.6.1.4.1.5923.1.1.1.1</span>"</span><span> <span>NameFormat</span>="<span>urn:oasis:names:tc:SAML:2.0:attrname-format:uri</span>"</span>></span></div><div style="margin-left:1em"><div><span><saml2:AttributeValue<span> <span>xmlns:xsi</span>="<span><a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span> <span>xsi:type</span>="<span>xs:string</span>"</span>></span><span>Member</span><span></saml2:AttributeValue></span></div></div></div></div><div><span style="color:rgb(0,0,0);font-family:monospace;line-height:normal"></saml2:Attribute></span></div><div><br></div><div>Right, so I'm getting something, yes?</div><div>And in my attribute-map.xml, I have (not commented out)</div><div> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" /></div><div>and</div><div><div> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/></div></div><div><br></div><div>So...presumably, these should be being mapped into environment variables that might smell like "uid" or "assurance", right?</div><div>But there are no variables at all...thus my confusion.</div><div>In the shibd.log, I see much XML activity, and I see</div><div><br></div><div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: inserted record (_63ffc3b15b9678a560f582a8a4c6e5c8) in context (_104bc35e38fe2d3af78c15f37c4dd546) with expiration (1417638550)</div><div>2014-12-03 14:29:10 INFO Shibboleth.SessionCache [4]: new session created: ID (_104bc35e38fe2d3af78c15f37c4dd546) IdP (<a href="https://idp.testshib.org/idp/shibboleth" target="_blank">https://idp.testshib.org/idp/shibboleth</a>) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (209.137.157.3)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: deleted record (792f1224b59ac34acefc420bf1c17608aabac9ad18f25a2c56b6b6732e4391c2) in context (RelayState)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.SSO.SAML2 [4]: ACS returning via redirect to: <a href="https://host.com/cgi-bin/file.name" target="_blank">https://host.com/cgi-bin/file.name</a></div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (find::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (touch::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (touch::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div></div><div><br></div><div>(I have sanitized out the actual hostname.) </div><div><br></div><div>Have I not mapped correctly? I really thought I read the wiki for comprehension...</div><div><br></div><div>Thanks for your help!</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-- Scott<br></blockquote><div><br></div><div>//jbaltz </div></div></blockquote></div>