On Wed, Sep 05, 2012 at 06:48:46PM -0500, Michael Jinks wrote: > On Wed, Sep 05, 2012 at 08:26:46PM +0000, Aaron Coburn wrote: > > > > First, create a file, such as test.php. Its contents can be as simple > > as: > > <?php phpinfo(); ?> > > View that page in a browser -- you should be forced to authenticate > > first; verify that the shibboleth attributes are present (e.g. do a > > search for 'eppn'). > > Argh. No 'eppn'; and, the test step from: > > http://people.apache.org/~acoburn/shibboleth.html > > ...no longer works either. 'test.php' shows every value as "Undefined". > So it looks like our relationship with our IdP has fallen apart for some > reason in the past couple of weeks. Great. Odd that authN still works > at all.
Nope, I'm an idiot; my apache shib configs weren't checked into our configuration management system, so they got reverted back to a partially-configured SP. Fixed that, revisited the Privileges section, now my shib-backed account has admin privs, but the "New Reservation" section still says "Selection not currently available" for all our system images. This problem rings a bell, so I'll revisit the steps I took to get things working in the first place and if I have trouble I'll post again under separate cover. Thanks Aaron. -m -- Michael Jinks :: [email protected] University of Chicago IT Services
