<div dir="ltr"><div><div><div><div>Hi,<br><br></div>I'm not sure if this is a bug that's been fixed (nothing showing in JIRA that I can see), a quirk of Apache/PHP, or a config option I've missed, but ApplicationDefaults@metadataAttributePrefix doesn't seem to work.<br><br></div>I have a test SP configured and it's receiving the expected attributes from the test IdP. My shibboleth2.xml includes:<br><br> <ApplicationDefaults entityID="..."<br> REMOTE_USER="eppn persistent-id targeted-id"<br> metadataAttributePrefix="Meta-"<br> sessionHook="/Shibboleth.sso/AttrChecker"<br> signing="false" encryption="false"><br><br>Shib-Application-ID default
Shib-Session-ID _090c43f7e49f752d7d75f23c639b0938
Shib-Identity-Provider https://...
Shib-Authentication-Instant 2015-04-16T22:30:56.539Z
Shib-Authentication-Method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-AuthnContext-Class urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Shib-Session-Index _20df03f993b759b7cc589a511c2fdbc9
eppn testUser@...
mail testUser@...
uid testUser <br></div>I'd expect those attributes to come through as Meta-eppn, Meta-mail, and Meta-uid.<br><br></div><div>Software versions are:<br><br><span style="font-family:monospace,monospace">dpkg -l | grep -e apache2 -e shib<br>ii apache2 2.4.7-1ubuntu4.4 amd64 Apache HTTP Server<br>ii apache2-bin 2.4.7-1ubuntu4.4 amd64 Apache HTTP Server (binary files and modules)<br>ii apache2-data 2.4.7-1ubuntu4.4 all Apache HTTP Server (common files)<br>ii apache2-mpm-prefork 2.4.7-1ubuntu4.4 amd64 transitional prefork MPM package for apache2<br>ii libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.7 amd64 server-side, HTML-embedded scripting language (Apache 2 module)<br>ii libapache2-mod-shib2 2.5.2+dfsg-2 amd64 Federated web single sign-on system (Apache module)<br>ii liblog4shib1:amd64 1.0.8-1 amd64 log4j-style configurable logging library for C++ (runtime)<br>ii libshibsp6:amd64 2.5.2+dfsg-2 amd64 Federated web single sign-on system (runtime)<br>ii shibboleth-sp2-schemas 2.5.2+dfsg-2 all Federated web single sign-on system (schemas)</span><br><br></div><div>Is the problem my expectations, my versions, my configuration, or a bug?<br></div><div><br></div><div>Phil<br></div></div>