<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-364bcf78-a6be-41a5-9b9c-2445c0fbbaff" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="0erxxc768sse5ukcejlbsp4firs=@https://registry.shibboleth.ox.ac.uk/idp" id="email_0erxxc768sse5ukcejlbsp4firs=@https://registry.shibboleth.ox.ac.uk/idp" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=0erxxc768sse5ukcejlbsp4firs%3D%40https%3A%2F%2Fregistry.shibboleth.ox.ac.uk%2Fidp" style="color:#0052cc;; color: #3b73af; text-decoration: none">Simon Mcleish</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1693" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-473ca3e8-4534-48f8-b5ff-df9902694735" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1693" style="color: #3b73af; text-decoration: none">IDP-1693</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1693" style="color: #3b73af; text-decoration: none">Attribute Transcoding doesn't happen for an Attribute Query</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-473ca3e8-4534-48f8-b5ff-df9902694735" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 4.0.1 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#0052cc;; color: #3b73af; text-decoration: none">Scott Cantor</a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Atttribute Transcoding </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 19/Oct/20 3:38 PM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Environment:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">The attribute query is being sent to IdP port 8443 and passed from Apache to tomcat using AJP.</p> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-minor-b5ddd9c8-fdd7-4bda-b610-e03679c3b45e" height="16" width="16" border="0" align="absmiddle" alt="Minor" style="vertical-align: text-bottom"> Minor </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="0erxxc768sse5ukcejlbsp4firs=@https://registry.shibboleth.ox.ac.uk/idp" id="email_0erxxc768sse5ukcejlbsp4firs=@https://registry.shibboleth.ox.ac.uk/idp" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=0erxxc768sse5ukcejlbsp4firs%3D%40https%3A%2F%2Fregistry.shibboleth.ox.ac.uk%2Fidp" style="color:#0052cc;; color: #3b73af; text-decoration: none">Simon Mcleish</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">The IdP is failing to transcode attributes for an attribnute request following an in-place upgrade from version 3. Prior to the upgrade, the IdP was working (at that point in Java 8), and post the upgrade, attributes are correctly encoded and released when attributes are released on authentication (to a different SP).</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">On startup, with debug, the following information is logged about transcoding:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2020-10-19 15:58:33,133 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.TranscodingRuleLoader:73]</span> - Loading rules from directory (/opt/shibboleth-idp/conf/attributes/custom)<br> 2020-10-19 15:58:33,135 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.TranscodingRuleLoader:99]</span> - Ignoring file (/opt/shibboleth-idp/conf/attributes/custom/README) with non-matching extension<br> 2020-10-19 15:58:33,180 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: eduPersonPrincipalName <-> SAML1:{urn:mace:shibboleth:1.0:attributeNamespace:uri}urn:mace:dir:attribute-def:eduPersonPrincipalName via SAML1ScopedStringAttributeTranscoder<br> 2020-10-19 15:58:33,184 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: eduPersonPrincipalName <-> SAML2:{urn:oasis:names:tc:SAML:2.0:attrname-format:uri}urn:oid:1.3.6.1.4.1.5923.1.1.1.6 via SAML2ScopedStringAttributeTranscoder<br> 2020-10-19 15:58:33,184 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: uid <-> SAML1:{urn:mace:shibboleth:1.0:attributeNamespace:uri}urn:mace:dir:attribute-def:uid via SAML1StringAttributeTranscoder<br> 2020-10-19 15:58:33,184 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: uid <-> SAML2:{urn:oasis:names:tc:SAML:2.0:attrname-format:uri}urn:oid:0.9.2342.19200300.100.1.1 via SAML2StringAttributeTranscoder<br> 2020-10-19 15:58:33,184 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: mail <-> SAML1:{urn:mace:shibboleth:1.0:attributeNamespace:uri}urn:mace:dir:attribute-def:mail via SAML1StringAttributeTranscoder<br> 2020-10-19 15:58:33,184 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: mail <-> SAML2:{urn:oasis:names:tc:SAML:2.0:attrname-format:uri}urn:oid:0.9.2342.19200300.100.1.3 via SAML2StringAttributeTranscoder<br> 2020-10-19 15:58:33,185 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: ;obID <-> SAML1:{urn:mace:shibboleth:1.0:attributeNamespace:uri}urn:mace:dir:attribute-def:employeeNumber via SAML1StringAttributeTranscoder<br> 2020-10-19 15:58:33,185 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: libID <-> SAML2:{urn:oasis:names:tc:SAML:2.0:attrname-format:uri}urn:oid:2.16.840.1.113730.3.1.3 via SAML2StringAttributeTranscoder<br> 2020-10-19 15:58:33,185 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: cn <-> SAML1:{urn:mace:shibboleth:1.0:attributeNamespace:uri}urn:mace:dir:attribute-def:cn via SAML1StringAttributeTranscoder<br> 2020-10-19 15:58:33,185 - DEBUG <span class="error">[net.shibboleth.idp.attribute.transcoding.impl.AttributeTranscoderRegistryImpl:290]</span> - Attribute mapping: cn <-> SAML2:{urn:oasis:names:tc:SAML:2.0:attrname-format:uri}urn:oid:2.5.4.3 via SAML2StringAttributeTranscoder</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">On login, the processing of the Attribute Query finds values in the LDAP server containing the data, and prepares them for release until the transcoding:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">net.shibboleth.idp.attribute.AttributeDecodingException: No transcoding rule for Attribute 'urn:oid:2.16.840.1.113730.3.1.3'net.shibboleth.idp.attribute.AttributeDecodingException: No transcoding rule for Attribute 'urn:oid:2.16.840.1.113730.3.1.3' at net.shibboleth.idp.saml.saml2.profile.impl.FilterByQueriedAttributes.decodeAttribute(FilterByQueriedAttributes.java:244)2020-10-19 16:26:03,791 - ERROR <span class="error">[net.shibboleth.idp.saml.saml2.profile.impl.FilterByQueriedAttributes:189]</span> - Profile Action FilterByQueriedAttributes: Error decoding queried Attributenet.shibboleth.idp.attribute.AttributeDecodingException: No transcoding rule for Attribute 'urn:oid:0.9.2342.19200300.100.1.3' at net.shibboleth.idp.saml.saml2.profile.impl.FilterByQueriedAttributes.decodeAttribute(FilterByQueriedAttributes.java:244)2020-10-19 16:26:03,792 - DEBUG <span class="error">[net.shibboleth.idp.saml.saml2.profile.impl.FilterByQueriedAttributes:198]</span> - Profile Action FilterByQueriedAttributes: Query content mapped to attribute IDs: []</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">And then no attributes are released.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">More log information is available if needed, but contains personal data so will need to be redacted.</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1693#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-60e1b5c4-69d7-4d67-baac-149351e26d2f" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1693#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v8.5.4#805004-<span title="0444eab799707f9ad7b248d69f858774aadfd250" data-commit-id="0444eab799707f9ad7b248d69f858774aadfd250}">sha1:0444eab</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>