[JIRA] Updated: (SC-163) NPE when using filtering based on EntityAttributes in metadata

[Chad La Joie (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SC-163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chad La Joie updated SC-163:
----------------------------

        Fix Version/s: 1.3.4
    Original Estimate: 0 minutes

> NPE when using filtering based on EntityAttributes in metadata
> --------------------------------------------------------------
>
>                 Key: SC-163
>                 URL: https://issues.shibboleth.net/jira/browse/SC-163
>             Project: Shibboleth Common - Java
>          Issue Type: Bug
>    Affects Versions: 1.3.3
>         Environment: CentOS 5.x, Tomcat
>            Reporter: ck8/rz0kdb7lgkfubk9wvghdv4s=@https://sso.brown.edu/idp/shibboleth
>            Assignee: Chad La Joie
>             Fix For: 1.3.4
>
>   Original Estimate: 0 minutes
>          Time Spent: 10 minutes
>  Remaining Estimate: 0 minutes
>
> Here's what I have within the Extensions element for my SP:
> <attr:EntityAttributes>
> <saml:Attribute FriendlyName="TestPolicyAttribute" Name="urn:mace:incommon:tags" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
> <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Category-1</saml:AttributeValue>
> </saml:Attribute>
> </attr:EntityAttributes>
> and here's the filter policy that I'm using:
>      <AttributeFilterPolicy id="releaseToTest9TAG">
>         <PolicyRequirementRule xsi:type="saml:AttributeRequesterEntityAttributeExactMatch"
>                        attributeName="urn:mace:incommon:tags"
>                        attributeValue="Category-1" />
>         <AttributeRule attributeID="eduPersonPrincipalName">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>         <AttributeRule attributeID="email">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>         <AttributeRule attributeID="displayName">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>     
>         <AttributeRule attributeID="givenName">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>         <AttributeRule attributeID="surName">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>         <AttributeRule attributeID="eduPersonScopedAffiliation">
>             <PermitValueRule xsi:type="basic:ANY" />
>         </AttributeRule>
>     </AttributeFilterPolicy>
> This results in this NPE:
> 12:55:34.778 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130] - Evaluating if filter policy releaseToTest9TAG is active for principal stc
> 12:55:34.794 - ERROR [edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:89] - Error occurred while processing request
> java.lang.NullPointerException: null
>         at edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.match.saml.AbstractEntityAttributeMatchFunctor.getEntityAttribute(AbstractEntityAttributeMatchFunctor.java:169) ~[shibboleth-common-1.3.3.jar:na]
>         at edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.match.saml.AbstractEntityAttributeMatchFunctor.hasEntityAttribute(AbstractEntityAttributeMatchFunctor.java:114) ~[shibboleth-common-1.3.3.jar:na]
> InCommon would like to demo this functionality at the I2MM, during the first week of Oct, 2011.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira