Hi,<br><br><div class="gmail_quote">On Wed Dec 03 2014 at 2:27:05 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I don't know what testshib releases, but your logs will tell you exactly<br>
what you're getting or that you're skipping because there's no rule<br>
defined to extract it.<br></blockquote><div><br></div><div>Right, and in fact, I see it in the shibd log -- which is why I'm convinced it's a shibd misconfig.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">>I do get:<br>
Then either you're not getting the attributes or you're not mapping them.<br></blockquote><div><br></div><div>OK, well as grabbed from the log, I'm getting (for example)</div><div class="collapsible" id="collapsible18" style="color:rgb(0,0,0);font-family:monospace;line-height:normal"><div class="expanded"><div class="line"><span class="html-tag"><saml2:Attribute<span class="html-attribute"> <span class="html-attribute-name">FriendlyName</span>="<span class="html-attribute-value">uid</span>"</span><span class="html-attribute"> <span class="html-attribute-name">Name</span>="<span class="html-attribute-value">urn:oid:0.9.2342.19200300.100.1.1</span>"</span><span class="html-attribute"> <span class="html-attribute-name">NameFormat</span>="<span class="html-attribute-value">urn:oasis:names:tc:SAML:2.0:attrname-format:uri</span>"</span>></span></div><div class="collapsible-content" style="margin-left:1em"><div class="line"><span class="html-tag"><saml2:AttributeValue<span class="html-attribute"> <span class="html-attribute-name">xmlns:xsi</span>="<span class="html-attribute-value"><a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span class="html-attribute"> <span class="html-attribute-name">xsi:type</span>="<span class="html-attribute-value">xs:string</span>"</span>></span><span class="text">alterego</span><span class="html-tag"></saml2:AttributeValue></span></div></div><div class="line"><span class="html-tag"></saml2:Attribute></span></div></div></div><div class="collapsible" id="collapsible19" style="color:rgb(0,0,0);font-family:monospace;line-height:normal"><div class="expanded"><div class="line"><span class="button collapse-button" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat"></span><span class="html-tag"><saml2:Attribute<span class="html-attribute"> <span class="html-attribute-name">FriendlyName</span>="<span class="html-attribute-value">eduPersonAffiliation</span>"</span><span class="html-attribute"> <span class="html-attribute-name">Name</span>="<span class="html-attribute-value">urn:oid:1.3.6.1.4.1.5923.1.1.1.1</span>"</span><span class="html-attribute"> <span class="html-attribute-name">NameFormat</span>="<span class="html-attribute-value">urn:oasis:names:tc:SAML:2.0:attrname-format:uri</span>"</span>></span></div><div class="collapsible-content" style="margin-left:1em"><div class="line"><span class="html-tag"><saml2:AttributeValue<span class="html-attribute"> <span class="html-attribute-name">xmlns:xsi</span>="<span class="html-attribute-value"><a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span class="html-attribute"> <span class="html-attribute-name">xsi:type</span>="<span class="html-attribute-value">xs:string</span>"</span>></span><span class="text">Member</span><span class="html-tag"></saml2:AttributeValue></span></div></div></div></div><div><span style="color:rgb(0,0,0);font-family:monospace;line-height:normal"></saml2:Attribute></span></div><div><br></div><div>Right, so I'm getting something, yes?</div><div>And in my attribute-map.xml, I have (not commented out)</div><div> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" /></div><div>and</div><div><div> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/></div></div><div><br></div><div>So...presumably, these should be being mapped into environment variables that might smell like "uid" or "assurance", right?</div><div>But there are no variables at all...thus my confusion.</div><div>In the shibd.log, I see much XML activity, and I see</div><div><br></div><div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: inserted record (_63ffc3b15b9678a560f582a8a4c6e5c8) in context (_104bc35e38fe2d3af78c15f37c4dd546) with expiration (1417638550)</div><div>2014-12-03 14:29:10 INFO Shibboleth.SessionCache [4]: new session created: ID (_104bc35e38fe2d3af78c15f37c4dd546) IdP (<a href="https://idp.testshib.org/idp/shibboleth">https://idp.testshib.org/idp/shibboleth</a>) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (209.137.157.3)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: deleted record (792f1224b59ac34acefc420bf1c17608aabac9ad18f25a2c56b6b6732e4391c2) in context (RelayState)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.SSO.SAML2 [4]: ACS returning via redirect to: <a href="https://host.com/cgi-bin/file.name">https://host.com/cgi-bin/file.name</a></div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (find::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (touch::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div><div>2014-12-03 14:29:10 DEBUG Shibboleth.Listener [4]: dispatching message (touch::StorageService::SessionCache)</div><div>2014-12-03 14:29:10 DEBUG XMLTooling.StorageService [4]: updated expiration of valid records in context (_104bc35e38fe2d3af78c15f37c4dd546) to (1417638550)</div></div><div><br></div><div>(I have sanitized out the actual hostname.) </div><div><br></div><div>Have I not mapped correctly? I really thought I read the wiki for comprehension...</div><div><br></div><div>Thanks for your help!</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-- Scott<br></blockquote><div><br></div><div>//jbaltz </div></div>