attributes are not getting released

[Ashok Kumar]

I think if you see the IdP access logs, it will tell you what attribute has
been resolved and what are filtered. You may need to set the log level to
debug to see all this.

Thanks,
-Ashok


On Tue, Aug 16, 2011 at 12:42 PM, Pavan K <pavanonnet1986 at gmail.com> wrote:

> Hi All,
>
> I am new to Shibboleth identity provider. I have installed and configured
> the Shibboleth identity provider by following the instructions given in
> shibboleth home page. I configured LDAP data connector to retrieve some
> attributes. And when i test the attribute resolver by using "AACLI" tool i
> am getting "No attribute statement" all the time. I did not find any logs
> related to attribute retrieval in the log files.
>
> My configuration details as follows,
>
> *"handler.xml"*
>
> <ph:LoginHandler xsi:type="ph:UsernamePassword"
>
> jaasConfigurationLocation="file://IDP_HOME/conf/login.config">
>
> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
>     </ph:LoginHandler>
>
> *"login.config"*
>
> edu.vt.middleware.ldap.jaas.LdapLoginModule required
>       ldapUrl="LDAP_URL"
>       baseDn="ou=public,dc=abc,dc=com"
>       tls="true"
>       userFilter="uid={0}"
>    ;
>
> *"attribute-filter.xml"
>
> *<afp:AttributeFilterPolicy>
>         <afp:PolicyRequirementRule xsi:type="basic:ANY" />
>
>         <afp:AttributeRule attributeID="mail">
>             <afp:PermitValueRule xsi:type="basic:ANY" />
>         </afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
>
> *"attribute-resolver.xml"
>
>
> * <resolver:AttributeDefinition xsi:type="ad:Simple" id="mail"
> sourceAttributeID="mail">
>         <resolver:Dependency ref="myLDAP" />
>     <resolver:AttributeEncoder xsi:type="SAML2String"
>     xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>             name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="mail" />
>
>     </resolver:AttributeDefinition>
>
> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
>         ldapURL="LDAP_URL"
>         baseDN="ou=public,dc=abc,dc=com"
>         principal="USER_NAME"
>         principalCredential="PASSWORD">
>         <dc:FilterTemplate>
>             <![CDATA[
>                 (uid=$requestContext.principalName)
>             ]]>
>         </dc:FilterTemplate>
>     </resolver:DataConnector>*
>
>
>
> *Even when i comment the statements in "login.config" file, i am not
> getting any errors in the log file and still getting "No Aattribute
> Statement" message. Following is the command i am using from "IDP_HOME"*
>
> aacli.bat --configDir=../conf --principal=<USER_NAME>
>
> *Could anyone please help me get this working? Am i missing something in
> the configruation?
>
> Thank you in advance.
>
> -- Pavan
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110816/1e7c106b/attachment.html