<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p></p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Hi All,</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I'm a student working in the IT department at Berea College. I've been tasked with setting up and IdP for the college. So far I've successfully installed the IdP v3 and a test service provider which can authenticate users against the schools Active Directory
LDAP server. I've hit a brick wall in the last couple of weeks because I haven't been able to get my IdP to release any attributes aside from the EPPN and uid.
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I copied the default connector for LDAP from attribute-resolver-ldap.xml into attribute-attribute-resolver.xml and I've also copied over the default attribute descriptions from attribute-resolver-full.xml for some of the standard attributes that we use in our
LDAP instance such as sn and mail. I've removed all the filters in attrbute-filter.xml and attribute-policy.xml to allow for everything to pass through unmolested, and I've uncommented all of the default attributes in attribute-map.xml, including the ones
for sn and mail. Even after all of this, the IdP still refuses to release attributes to my test service provider and the one that I have set up on testshib.org.</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
I've tried to use the aacli.sh script like so: <font color="#000000"><font face="monospace">.</font></font>/aacli.sh --principal newswangerd --configDir /opt/shibboleth-idp/conf/ --requester
<font color="#000080"><span lang="zxx"><u><a id="LPlnk100180" title="Ctrl+Click or tap to follow the link" href="https://idp.testshib.org/idp/shibboleth" style="">https://idp.testshib.org/idp/shibboleth</a></u></span></font> and rather than receiving a SAML
assertion like the wiki said I should, I got this string:</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
(http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Fidp.testshib.org%2Fidp%2Fshibboleth&principal=newswangerd) http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Fidp.testshib.org%2Fidp%2Fshibboleth&principal=newswangerd<br>
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Does anyone know what might be going on? What can I do to debug this problem? <br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
<br>
</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
Thanks,</p>
<p style="margin-bottom:0in; line-height:100%; font-family:"Liberation Serif",serif; font-size:12pt">
David Newswanger.</p>
<br>
<p></p>
</div>
</body>
</html>