• Product: Aleph
• Product Version: 20, 21, 22, 23
• Relevant for Installation Type: Dedicated-Direct, Direct, Local, Total Care

Problem Symptoms:
*Shibboleth login fails without any error
*After logging in to PDS via Shibboleth, the user's name is not displayed; "default" or "GUEST" appears instead
*User is not given any logged-in privileges
*PDS log indicates that login was successful, but attributes are not interpreted correctly to application environment

Cause:
Shib.conf file contains attributes in the [shib_attributes] section that do not match the names of the parameters returned by Shibboleth.

For example, Shib.conf contains the following in the [shib_attributes] section:
Shib_affiliation = z312_group

However, the pds_server.log shows the following parameter returned from Shibboleth:
2013-12-11 11:41:21 4854 DEBUG [shib::shib] shib affiliation = <SAMPLE AFFILIATION>

Resolution:
Edit shib.conf file so that the parameters PDS expects to receive match the parameters it receives.

In the example above, change the [shib_attributes] section to:
affiliation = z312_group
 

• Article last edited: 6-Jun-2016