HI Alejandro & co,

I have at tome point been fighting with similar issues. First of all, what I found really helpful was to use the native.logger in shibboleth.xml and configuring log4j.rootCategory=DEBUG in the native.logger configuration file.

Nowadays I always use gss-server and gss-client for testing. With the native logger set to debug, the gss-server prints a ton of information about what shibboleth actually does. After I realized this, my life got much easier. 

In my current setup (based on debian live DVD) I don't map any radius attributes to the local-login-user. At the moment I use the eppn as local-login-user. I got it working by commenting out the original eppn mapping from attribute-map and replacing it with.

<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="local-login-user">
      <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
</Attribute>

With some quick testing, I can't seem to map the radius attributes either. I'm not sure if I'm missing something, or if something changed in the newer version.

Cheers,
Kalle


----- Original Message -----
From: "Alejandro Perez Mendez" <[log in to unmask]>
To: [log in to unmask]
Sent: Monday, 17 June, 2013 6:43:03 PM
Subject: Re: SSH and authorization

Thank you Sam,

I also tried that when I figured out it was required. Now, although 
plugins.so file is being loaded (according to strace), it is still not 
working. Probably I'm lacking some configuration option somewhere. 
Hopefully enabling log will provide me with further details.

Regards,
Alejandro


El 17/06/13 17:39, Sam Hartman escribió:
> Check your shibboleth.xml config and make sure you're loading the
> plugins.so extension.
> There was some discussion of that here within the last week.
> Needed for GSS attributes but not SAML.