The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Dubravko Voncina <address@concealed>]

Hello Carlos,

Apparently, your authentication service (IdP) provides "blank" value of an attribute urn:oid:1.3.6.1.4.1.5923.1.1.1.10 (eduPersonTargetedID). Authentication response from your IdP looks like:

<saml2:AttributeStatement>

  <saml2:Attribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">address@concealed</saml2:AttributeValue>

  </saml2:Attribute>

  <saml2:Attribute FriendlyName="cn" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Gerencia Tecnica RENATA</saml2:AttributeValue>

  </saml2:Attribute>

  <saml2:Attribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Gerencia Tecnica</saml2:AttributeValue>

  </saml2:Attribute>

  <saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Carlos Alberto</saml2:AttributeValue>

  </saml2:Attribute>

  <saml2:Attribute FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue>

    </saml2:AttributeValue>

  </saml2:Attribute>

  <saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

    <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">address@concealed</saml2:AttributeValue>

  </saml2:Attribute>

</saml2:AttributeStatement>

Your IdP must provide a valid (non blank) eduPersonTargetedID value for user to access eduroam supporting services.

Best regards,

Dubravko Voncina
Middleware and Data Services Department
University of Zagreb, University Computing Centre, www.srce.unizg.hr
address@concealed, tel: +385 98 219273, fax: +385 1 6165559

On 11 Apr 2018, at 23:47, Gerencia de Tecnologías de la Información <address@concealed> wrote:

Dear all 

we have problems with the user administrator form cat administrator Colombia, the reported user is address@concealed.

the error reported is:

<Captura de pantalla 2018-04-11 a la(s) 4.47.06 p. m..png>

best regards

​

Carlos Ramírez Guzmán

Gerente de Tecnologías de la información | Chief Information Officer
Correo electrónico: address@concealed Móvil: (+57) 3155890044
Teléfono: (57+1) 5185353, ext. 1003
Carrera 18 # 79 – 47
Bogotá D.C. – Colombia

 

  

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users