<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 12, 2015 at 11:20 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On 3/12/15, 11:09 AM, "Marc Boorshtein" <<a href="mailto:mboorshtein@gmail.com">mboorshtein@gmail.com</a>> wrote:<br>
<br>
><resolver:AttributeDefinition<br>
>id="cn"xsi:type="ad:Simple"sourceAttributeID="cn"><br>
> <resolver:Dependency<br>
<br>
</span>As a sanity check, use a different internal name for the attribute definition and see if that helps. Or use 3.1 and see if anything changes.<br>
<span class=""><br></span></blockquote><div><br></div><div>so change the id attribute of the resolver:AttributeDefinition ?</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">
>But I'm still not getting anything in the assertion (nor am I being prompted to consent to the attributes being released). Am I missing something?<br>
<br>
</span>If you have consent on, and it doesn't prompt, then no attributes making it past the filter step are configured to require consent. But the log can tell you exactly what makes it past the filter. And I can also tell you that changing the name has no impact on any step but the final encoding. So my guess is you're hitting a bug in the resolver that was fixed.<br></blockquote><div><br></div><div>prior to changing the name on the encoder the attribute being handled by consent. Looking in the logs all I see is:</div><div><br></div><div>
<p class=""><span class="">2015-03-12 10:04:01,148 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95] - Attribute Definition 'eduPersonPrincipalName': setting sourceAttributeId eduPersonPri</span></p>
<p class=""><span class="">ncipalName.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,149 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106] - Attribute Definition 'eduPersonPrincipalName': adding 2 encoders.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,161 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58] - Parsing configuration for AttributeDefinition plugin with id : uid</span></p>
<p class=""><span class="">2015-03-12 10:04:01,161 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52] - Parsing configuration for Dependency with pluginId : myLDAP</span></p>
<p class=""><span class="">2015-03-12 10:04:01,161 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95] - Attribute Definition 'uid': setting sourceAttributeId uid.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,162 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106] - Attribute Definition 'uid': adding 2 encoders.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,163 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58] - Parsing configuration for AttributeDefinition plugin with id : cn</span></p>
<p class=""><span class="">2015-03-12 10:04:01,164 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52] - Parsing configuration for Dependency with pluginId : myLDAP</span></p>
<p class=""><span class="">2015-03-12 10:04:01,164 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95] - Attribute Definition 'uid': setting sourceAttributeId cn.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,164 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106] - Attribute Definition 'uid': adding 2 encoders.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,165 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58] - Parsing configuration for AttributeDefinition plugin with id : </span><span class="">sn</span></p>
<p class=""><span class="">2015-03-12 10:04:01,166 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52] - Parsing configuration for Dependency with pluginId : myLDAP</span></p>
<p class=""><span class="">2015-03-12 10:04:01,166 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95] - Attribute Definition 'uid': setting sourceAttributeId </span><span class="">sn</span><span class="">.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,166 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106] - Attribute Definition 'uid': adding 2 encoders.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,167 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:58] - Parsing configuration for AttributeDefinition plugin with id : mail</span></p>
<p class=""><span class="">2015-03-12 10:04:01,168 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:52] - Parsing configuration for Dependency with pluginId : myLDAP</span></p>
<p class=""><span class="">2015-03-12 10:04:01,168 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:95] - Attribute Definition 'uid': setting sourceAttributeId mail.</span></p>
<p class=""><span class="">2015-03-12 10:04:01,168 - DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:106] - Attribute Definition 'uid': adding 2 encoders.</span></p><p class=""><span class="">so it appears that the encoder is being rejected. note that uid has 2 encoders but after cn and sn there's no mention of encoders so I'm assuming they're not being processed or are being skipped?</span></p></div><div> Thanks</div><div>Marc</div></div></div></div>