[cas-user] mail attribute question

[McKennon, Robert]

I'm looking to retrieve an attribute from LDAP (specifically "mail")
upon a samlValidate.  But testing with SoapUI, I only see the
NameIdentifier being returned.  Can someone tell me what I am missing?

I've seen other posts online where their "POST" is exactly like this,
but they get a lot more returned than I do.

 

 

Here's the post:

 

<SOAP-ENV:Envelope

 
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/";>

               <SOAP-ENV:Header/>

               <SOAP-ENV:Body>

                  <samlp:Request

 
xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"

                              MajorVersion="1" MinorVersion="1"

                              RequestID="_192.168.16.51.1024506224022"

                              IssueInstant="2002-06-19T17:03:44.022Z">

                                             <samlp:AssertionArtifact>

 
ST-1-cfcmLSReEOChVF94M92M-cas

                                             </samlp:AssertionArtifact>

                              </samlp:Request>

               </SOAP-ENV:Body>

</SOAP-ENV:Envelope>

 

And here's the return:

 

<SOAP-ENV:Envelope
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/";>

   <SOAP-ENV:Header/>

   <SOAP-ENV:Body>

      <Response IssueInstant="2010-05-31T21:07:48.720Z" MajorVersion="1"
MinorVersion="1" Recipient="http://192.168.167.74/";
ResponseID="_564b8553fa03d33e1a03ce77179cd0a2"
xmlns="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:xsd="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>

         <Status>

            <StatusCode Value="samlp:Success"/>

         </Status>

         <Assertion AssertionID="_ac517d905e7c8dbbe5fb5784579d3088"
IssueInstant="2010-05-31T21:07:48.720Z" Issuer="localhost"
MajorVersion="1" MinorVersion="1"
xmlns="urn:oasis:names:tc:SAML:1.0:assertion">

            <Conditions NotBefore="2010-05-31T21:07:48.720Z"
NotOnOrAfter="2010-05-31T21:08:18.720Z">

               <AudienceRestrictionCondition>

                  <Audience>http://192.168.167.74/</Audience
<http://192.168.167.74/%3c/Audience> >

               </AudienceRestrictionCondition>

            </Conditions>

            <AuthenticationStatement
AuthenticationInstant="2010-05-31T21:06:37.578Z"
AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified">

               <Subject>

                  <NameIdentifier>test1</NameIdentifier>

                  <SubjectConfirmation>

 
<ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:artifact</Confirmatio
nMethod>

                  </SubjectConfirmation>

               </Subject>

            </AuthenticationStatement>

         </Assertion>

      </Response>

   </SOAP-ENV:Body>

</SOAP-ENV:Envelope>

 

 

 

V/R,

 

Rob McKennon

Unix Admin (fish out of water)

 


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user