Yes the attributes appear ok from the University Of Leeds IdP
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Jon Warbrick
Sent: 16 November 2007 14:07
To: [log in to unmask]
Subject: Attribute Request Credential problem
Some of you may have seen this issue mentioned on the
[log in to unmask] list. Simon McLeish of LSE and I are
failing to get Cambridge's IdP to interwork with a Wiki at LSE, despite
number of other IdPs having no problem accessing it.
What seems to happen is that the authentication phase works fine, but
LSE request attributes from my IdP the request contains credentials
my end doesn't think are valid for that SP - I end up logging
2007-11-13T14:39:40+0000 localhost [shib] cannot match certificate
subject against acceptable key names based on the metadata entityId
2007-11-13T14:39:40+0000 localhost [shib] Supplied credentials
(CN=gate-test.library.lse.ac.uk,OU=Library,O=London School of
Economics,L=London,ST=London,C=GB) are NOT valid for provider
Firstly, has anyone any idea what's going on here?
Secondly, if anyone has access to a UK Federation-only IdP that is
expected to release at least some attributes (perhaps ePSA and/or ePTID)
to LSE then could you try accessing
and let me know if those attributes appear in the resulting table (the
table will appear whatever, the question is whether the attribute values
are there or not). Just tell me - I'll summarise replies and any
outcome to the list.
Ta in advance.
Web/News Development, Computing Service, University of Cambridge