<div dir="ltr">Hi,<div><br></div><div>I am using the <span style="font-family:"courier new",monospace">/idp/profile/admin/</span>resolvertest endpoint (<a href="https://wiki.shibboleth.net/confluence/display/IDP30/AACLI">https://wiki.shibboleth.net/confluence/display/IDP30/AACLI</a>) for attribute resolution tests. I'm calling the endpoint on the machine running the IdP as follows:</div><div><br></div><div>curl --insecure '<a href="https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar">https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar</a>'</div><div><br></div><div>I've noticed that running the above command on my local test vm gives differently-formatted output to the exact same command on my real test IdP.</div><div><br></div><div>local vm:</div><div><font face="courier new, monospace"># curl --insecure '<a href="https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar">https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar</a>'<br><br>{<br>"requester": "foo",<br>"principal": "bar",<br>"attributes": [<br><br><br>  {<br>    "name": "eduPersonTargetedID",<br>    "values": [<br>              "4rSNVLEHFZNkNZEQeTgfPcVvIhE="          ]<br>  },<br><br>  {<br>    "name": "eduPersonTargetedID.old",<br>    "values": [<br>              "4rSNVLEHFZNkNZEQeTgfPcVvIhE=@<a href="http://york.ac.uk">york.ac.uk</a>"          ]<br>  }<br><br>]<br>}</font><br></div><div><br></div><div>test IdP:</div><div><br></div><div><font face="courier new, monospace"># curl --insecure '<a href="https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar">https://localhost/idp/profile/admin/resolvertest?requester=foo&principal=bar</a>'<br><br>{<br>"requester": "foo",<br>"principal": "bar",<br>"attributes": [<br><br><br>  {<br>    "name": "eduPersonTargetedID",<br>    "values": [<br>              "XMLObjectAttributeValue{value=org.opensaml.saml.saml2.core.impl.NameIDImpl@1cfab44a}"          ]<br>  },<br><br>  {<br>    "name": "eduPersonTargetedID.old",<br>    "values": [<br>              "ScopedStringAttributeValue{value=4rSNVLEHFZNkNZEQeTgfPcVvIhE=, scope=<a href="http://york.ac.uk">york.ac.uk</a>}"          ]<br>  }<br><br>]<br>}</font></div><br>Note the differences in the values:<div><span style="font-family:"courier new",monospace">"4rSNVLEHFZNkNZEQeTgfPcVvIhE="</span></div><div><font face="arial, sans-serif">compared to</font></div><div>"XMLObjectAttributeValue{value=org.opensaml.saml.saml2.core.impl.NameIDImpl@1cfab44a}" and</div><div><span style="font-family:"courier new",monospace">"4rSNVLEHFZNkNZEQeTgfPcVvIhE=@<a href="http://york.ac.uk">york.ac.uk</a>"</span><br></div><div>compared to</div><div><span style="font-family:"courier new",monospace">"ScopedStringAttributeValue{value=4rSNVLEHFZNkNZEQeTgfPcVvIhE=, scope=<a href="http://york.ac.uk">york.ac.uk</a>}"</span>.<div><div><br></div><div>Both of these boxes are running IdP 3.4.1 on openjdk 1.8.0_212 on fully upgraded Ubuntu 16.04.6 LTS (4.4.0-151-generic) installations. They are built and configured entirely using puppet and so <i>should</i> have identical configuration.</div><div><br></div><div>Can anyone suggest what might be causing this difference between the two installations?</div><div><br></div><div>Thanks,</div><div><br></div><div>Max Spicer</div></div></div></div>