attributes are not getting released

[Pavan K]

Hi All,

I am new to Shibboleth identity provider. I have installed and configured
the Shibboleth identity provider by following the instructions given in
shibboleth home page. I configured LDAP data connector to retrieve some
attributes. And when i test the attribute resolver by using "AACLI" tool i
am getting "No attribute statement" all the time. I did not find any logs
related to attribute retrieval in the log files.

My configuration details as follows,

*"handler.xml"*

<ph:LoginHandler xsi:type="ph:UsernamePassword"

jaasConfigurationLocation="file://IDP_HOME/conf/login.config">

<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
    </ph:LoginHandler>

*"login.config"*

edu.vt.middleware.ldap.jaas.LdapLoginModule required
      ldapUrl="LDAP_URL"
      baseDn="ou=public,dc=abc,dc=com"
      tls="true"
      userFilter="uid={0}"
   ;

*"attribute-filter.xml"

*<afp:AttributeFilterPolicy>
        <afp:PolicyRequirementRule xsi:type="basic:ANY" />

        <afp:AttributeRule attributeID="mail">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>

*"attribute-resolver.xml"


* <resolver:AttributeDefinition xsi:type="ad:Simple" id="mail"
sourceAttributeID="mail">
        <resolver:Dependency ref="myLDAP" />
    <resolver:AttributeEncoder xsi:type="SAML2String"
    xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
            name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="mail" />
    </resolver:AttributeDefinition>

<resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
        ldapURL="LDAP_URL"
        baseDN="ou=public,dc=abc,dc=com"
        principal="USER_NAME"
        principalCredential="PASSWORD">
        <dc:FilterTemplate>
            <![CDATA[
                (uid=$requestContext.principalName)
            ]]>
        </dc:FilterTemplate>
    </resolver:DataConnector>*



*Even when i comment the statements in "login.config" file, i am not getting
any errors in the log file and still getting "No Aattribute Statement"
message. Following is the command i am using from "IDP_HOME"*

aacli.bat --configDir=../conf --principal=<USER_NAME>

*Could anyone please help me get this working? Am i missing something in the
configruation?

Thank you in advance.

-- Pavan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110816/402bb742/attachment-0001.html