<div dir="ltr">Hi <span style="font-size:12.8px">eln00b, follows a basic script that I use here:</span><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"><br></span></div><div><div><span style="font-size:12.8px"><u>1º - In "ldap.properties" file:</u></span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>You need to configure ldap server parameters</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"><u>2º - In "attribute-resolver.xml" file:</u></span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>a) configure ldap connector with returnAttributes, like "cn", "sn", ... Ex:</span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</span></div><div><span style="font-size:12.8px"> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"</span></div><div><span style="font-size:12.8px"> baseDN="%{idp.attribute.resolver.LDAP.baseDN}"</span></div><div><span style="font-size:12.8px"> principal="%{idp.attribute.resolver.LDAP.bindDN}"</span></div><div><span style="font-size:12.8px"> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"</span></div><div><span style="font-size:12.8px"> useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"></span></div><div><span style="font-size:12.8px"> <dc:FilterTemplate></span></div><div><span style="font-size:12.8px"> <![CDATA[</span></div><div><span style="font-size:12.8px"> %{idp.attribute.resolver.LDAP.searchFilter}</span></div><div><span style="font-size:12.8px"> ]]></span></div><div><span style="font-size:12.8px"> </dc:FilterTemplate></span></div><div><span style="font-size:12.8px"> <dc:ReturnAttributes>%{idp.authn.LDAP.returnAttributes} cn sn mail</dc:ReturnAttributes></span></div><div><span style="font-size:12.8px"> </resolver:DataConnector></span></div><div><span style="font-size:12.8px"><br></span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>b) configure the attributes definitions. Where, id="anything" and sourceAttributeID="ldap_attribute" Ex:</span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <resolver:AttributeDefinition id="commonName" xsi:type="ad:Simple" sourceAttributeID="cn"></span></div><div><span style="font-size:12.8px"> <resolver:Dependency ref="myLDAP" /></span></div><div><span style="font-size:12.8px"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:cn" encodeType="false" /></span></div><div><span style="font-size:12.8px"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.5.4.3" friendlyName="cn" encodeType="false" /></span></div><div><span style="font-size:12.8px"> </resolver:AttributeDefinition></span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"><u>3º - In "attribute-filter.xml" file:</u></span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>you define which attribute will be released to the SP. For every SP, ex:</span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <AttributeFilterPolicy id="releaseToAnyone"></span></div><div><span style="font-size:12.8px"> <PolicyRequirementRule xsi:type="ANY"/></span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"> <AttributeRule attributeID="commonName"></span></div><div><span style="font-size:12.8px"> <PermitValueRule xsi:type="ANY" /></span></div><div><span style="font-size:12.8px"> </AttributeRule></span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span></AttributeFilterPolicy></span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><u>For a specific SP, ex:</u></span></div><div><span class="gmail-Apple-tab-span" style="white-space:pre;font-size:12.8px"> </span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <AttributeFilterPolicy id="SP-01"></span></div><div><span style="font-size:12.8px"> <PolicyRequirementRule xsi:type="OR"></span></div><div><span style="font-size:12.8px"> <Rule xsi:type="Requester" value="<a href="https://sp01.domain.com/">https://sp01.domain.com/</a>" /></span></div><div><span style="font-size:12.8px"> <Rule xsi:type="InEntityGroup" groupID="urn:mace:switch.ch:SWITCHaai:interfederation" /></span></div><div><span style="font-size:12.8px"> </PolicyRequirementRule></span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"> <AttributeRule attributeID="commonName"></span></div><div><span style="font-size:12.8px"> <PermitValueRule xsi:type="ANY" /></span></div><div><span style="font-size:12.8px"> </AttributeRule></span></div><div><span style="font-size:12.8px"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span></AttributeFilterPolicy></span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px"><br></span></div></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">This is the basic .. hope it helps...</span><br></div><div><span style="font-size:12.8px">As said Nate, we need additional details to help you better..</span><br></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Regards,</span></div><div><span style="font-size:12.8px">Glaidson</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 20, 2016 at 9:50 AM, eln00b <span dir="ltr"><<a href="mailto:jbru0003@synchronoss.com" target="_blank">jbru0003@synchronoss.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have Shibboleth set up with LDAP without any connection issues at this<br>
point. Now I need to return the attributes in the response sent back to my<br>
Service Provider.<br>
<br>
Currently nothing is getting sent back at all.<br>
<br>
Here's some information from the various files:<br>
<br>
*conf/ldap.properties*<br>
<br>
<br>
*conf/attribute-resolver-ldap.<wbr>xml*<br>
<br>
<br>
I looked in<br>
- <a href="https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/IDP30/<wbr>LDAPConnector</a><br>
-<br>
<a href="https://wiki.shibboleth.net/confluence/display/IDP30/AttributeResolverConfiguration" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/IDP30/<wbr>AttributeResolverConfiguration</a><br>
<br>
Based on that it seems like my configuration should be correct.<br>
<br>
What am I missing and is there anything I can turn on in the /logback.xml/<br>
file that will help me troubleshoot?<br>
<br>
<br>
<br>
<br>
-----<br>
<br>
el n00b - Trying to understand technology and help create documentation online wherever I get stuck.<br>
--<br>
View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-V3-with-LDAP-No-Attributes-tp7628989.html" rel="noreferrer" target="_blank">http://shibboleth.1660669.n2.<wbr>nabble.com/Shibboleth-V3-with-<wbr>LDAP-No-Attributes-tp7628989.<wbr>html</a><br>
Sent from the Shibboleth - Users mailing list archive at Nabble.com.<br>
<span class="HOEnZb"><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div>