<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hello,</p>
<p><br>
</p>
<p>I am currently trying to set up an IdP and SP on a Debian machine. The credentials are stored and provided by an LDAP Server. I can successfully log-in, but the IdP doesen't release any attribute. The list on /Shibboleth.sso/Session and the transaction.log
file from the SP show no incoming attributes. I think my SP configuration should be ok. I tested it with testshib.org and their attributes are in the SPs transaction.log.<br>
</p>
<p>At the moment I am just trying to release one easy Attribute to my SP which is not even stored in LDAP. (In my understanding this is the username I type into the log-in form on the webpage, isn't it?)<br>
</p>
<p><br>
</p>
<p>from "attribute-resolver.xml": </p>
<p><br>
</p>
<p> <resolver:AttributeDefinition id="uid" xsi:type="ad:PrincipalName"><br>
<resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /><br>
<resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /><br>
</resolver:AttributeDefinition> </p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>The first times the IdP "warned" me that it will release other informations to the SP than last time and I had to accept this info, but nevertheless the transaction.log stays empty.
</p>
<p>I use the standard "attribute-filter.xml" file and only changed the value to my SP (and the id):</p>
<p><br>
</p>
<p><!-- Release some attributes to an SP. --><br>
<AttributeFilterPolicy id="SSOMED"><br>
<PolicyRequirementRule xsi:type="Requester" value="https://sso-med1.imib.rwth-aachen.de" /><br>
<br>
<AttributeRule attributeID="eduPersonPrincipalName"><br>
<PermitValueRule xsi:type="ANY" /><br>
</AttributeRule><br>
<br>
<AttributeRule attributeID="uid"><br>
<PermitValueRule xsi:type="ANY" /><br>
</AttributeRule><br>
<br>
<AttributeRule attributeID="mail"><br>
<PermitValueRule xsi:type="ANY" /><br>
</AttributeRule><br>
</AttributeFilterPolicy><br>
<br>
</p>
<p><br>
</p>
<p>Do I have to change other things for a basic attribute release? Do you need the whole file or other files to help me?<br>
</p>
<p>It is my first time working with Shibboleth and I actually don't have any experience in this field at all. So I would be glad for any<span dir="ltr"><span lang="en"> tips and recommendations
</span></span>you can give me.<br>
</p>
<p><br>
</p>
<p>Thank you for your time and I hope you can help me.</p>
<p><br>
</p>
<p><br>
</p>
<p>kind regards,</p>
<p>Sebastian<br>
</p>
<p><br>
</p>
</div>
<p><br>
</p>
</body>
</html>