<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>What IdP version are you working with?</p>
<p><br>
</p>
<p>Removing filters from attribute-filter.xml is probably exactly the opposite of what you need to do.</p>
<p><br>
</p>
<p>Turning up the logging level can be helpful, or overwhelming, depending on how much detail you ask it for and how much you can make sense of.<br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of David E. Newswanger <David_Newswanger@berea.edu><br>
<b>Sent:</b> Wednesday, December 09, 2015 3:56 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Help Releasing Attributes</font>
<div> </div>
</div>
<div>
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p></p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Hi All,</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I'm a student working in the IT department at Berea College. I've been tasked with setting up and IdP for the college. So far I've successfully installed the IdP v3 and a test service provider which can authenticate users against the schools Active Directory
LDAP server. I've hit a brick wall in the last couple of weeks because I haven't been able to get my IdP to release any attributes aside from the EPPN and uid.
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I copied the default connector for LDAP from attribute-resolver-ldap.xml into attribute-attribute-resolver.xml and I've also copied over the default attribute descriptions from attribute-resolver-full.xml for some of the standard attributes that we use in our
LDAP instance such as sn and mail. I've removed all the filters in attrbute-filter.xml and attribute-policy.xml to allow for everything to pass through unmolested, and I've uncommented all of the default attributes in attribute-map.xml, including the ones
for sn and mail. Even after all of this, the IdP still refuses to release attributes to my test service provider and the one that I have set up on testshib.org.</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I've tried to use the aacli.sh script like so: <font color="#000000"><font face="monospace">.</font></font>/aacli.sh --principal newswangerd --configDir /opt/shibboleth-idp/conf/ --requester
<font color="#000080"><span lang="zxx"><u><a id="LPlnk100180" title="Ctrl+Click or tap to follow the link" href="https://idp.testshib.org/idp/shibboleth" style="">https://idp.testshib.org/idp/shibboleth</a></u></span></font> and rather than receiving a SAML
assertion like the wiki said I should, I got this string:</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
(http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Fidp.testshib.org%2Fidp%2Fshibboleth&principal=newswangerd) http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Fidp.testshib.org%2Fidp%2Fshibboleth&principal=newswangerd<br>
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Does anyone know what might be going on? What can I do to debug this problem? <br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Thanks,</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
David Newswanger.</p>
<br>
<p></p>
</div>
</div>
</div>
</div>
</body>
</html>