attributes are not getting released

[Pavan K]

Thank you Ashok. IN the logs i am seeing the following messages,

Resolved attribute uid containing 0 values
13:31:29.447 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]
- Resolving attribute mail for principal pavank
13:31:29.447 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]
- Resolved attribute mail containing 0 values
13:31:29.447 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]
- Resolving attribute transientId for principal pavank

I did not understand why it is not getting the value from LDAP. Is there
configuration i am missing?

Thank you,
Pavan

On Tue, Aug 16, 2011 at 1:05 PM, Ashok Kumar <ashok.kumar at csueastbay.edu>wrote:

> I think if you see the IdP access logs, it will tell you what attribute has
> been resolved and what are filtered. You may need to set the log level to
> debug to see all this.
>
> Thanks,
> -Ashok
>
>
> On Tue, Aug 16, 2011 at 12:42 PM, Pavan K <pavanonnet1986 at gmail.com>wrote:
>
>> Hi All,
>>
>> I am new to Shibboleth identity provider. I have installed and configured
>> the Shibboleth identity provider by following the instructions given in
>> shibboleth home page. I configured LDAP data connector to retrieve some
>> attributes. And when i test the attribute resolver by using "AACLI" tool i
>> am getting "No attribute statement" all the time. I did not find any logs
>> related to attribute retrieval in the log files.
>>
>> My configuration details as follows,
>>
>> *"handler.xml"*
>>
>> <ph:LoginHandler xsi:type="ph:UsernamePassword"
>>
>> jaasConfigurationLocation="file://IDP_HOME/conf/login.config">
>>
>> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
>>     </ph:LoginHandler>
>>
>> *"login.config"*
>>
>> edu.vt.middleware.ldap.jaas.LdapLoginModule required
>>       ldapUrl="LDAP_URL"
>>       baseDn="ou=public,dc=abc,dc=com"
>>       tls="true"
>>       userFilter="uid={0}"
>>    ;
>>
>> *"attribute-filter.xml"
>>
>> *<afp:AttributeFilterPolicy>
>>         <afp:PolicyRequirementRule xsi:type="basic:ANY" />
>>
>>         <afp:AttributeRule attributeID="mail">
>>             <afp:PermitValueRule xsi:type="basic:ANY" />
>>         </afp:AttributeRule>
>>     </afp:AttributeFilterPolicy>
>>
>> *"attribute-resolver.xml"
>>
>>
>> * <resolver:AttributeDefinition xsi:type="ad:Simple" id="mail"
>> sourceAttributeID="mail">
>>         <resolver:Dependency ref="myLDAP" />
>>     <resolver:AttributeEncoder xsi:type="SAML2String"
>>     xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>>             name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="mail"
>> />
>>     </resolver:AttributeDefinition>
>>
>> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
>>         ldapURL="LDAP_URL"
>>         baseDN="ou=public,dc=abc,dc=com"
>>         principal="USER_NAME"
>>         principalCredential="PASSWORD">
>>         <dc:FilterTemplate>
>>             <![CDATA[
>>                 (uid=$requestContext.principalName)
>>             ]]>
>>         </dc:FilterTemplate>
>>     </resolver:DataConnector>*
>>
>>
>>
>> *Even when i comment the statements in "login.config" file, i am not
>> getting any errors in the log file and still getting "No Aattribute
>> Statement" message. Following is the command i am using from "IDP_HOME"*
>>
>> aacli.bat --configDir=../conf --principal=<USER_NAME>
>>
>> *Could anyone please help me get this working? Am i missing something in
>> the configruation?
>>
>> Thank you in advance.
>>
>> -- Pavan
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
>
> --
>
>
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110816/57435173/attachment.html