attributes are not getting released

[Ashok Kumar]

How is your LDAP Data connector entry looks like in resolver.conf file?

Thanks,
-Ashok

On Tue, Aug 16, 2011 at 1:38 PM, Pavan K <pavanonnet1986 at gmail.com> wrote:

> Thank you Ashok. IN the logs i am seeing the following messages,
>
> Resolved attribute uid containing 0 values
> 13:31:29.447 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]
> - Resolving attribute mail for principal pavank
> 13:31:29.447 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336]
> - Resolved attribute mail containing 0 values
> 13:31:29.447 - DEBUG
> [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314]
> - Resolving attribute transientId for principal pavank
>
> I did not understand why it is not getting the value from LDAP. Is there
> configuration i am missing?
>
> Thank you,
> Pavan
>
>
> On Tue, Aug 16, 2011 at 1:05 PM, Ashok Kumar <ashok.kumar at csueastbay.edu>wrote:
>
>> I think if you see the IdP access logs, it will tell you what attribute
>> has been resolved and what are filtered. You may need to set the log level
>> to debug to see all this.
>>
>> Thanks,
>> -Ashok
>>
>>
>> On Tue, Aug 16, 2011 at 12:42 PM, Pavan K <pavanonnet1986 at gmail.com>wrote:
>>
>>>  Hi All,
>>>
>>> I am new to Shibboleth identity provider. I have installed and configured
>>> the Shibboleth identity provider by following the instructions given in
>>> shibboleth home page. I configured LDAP data connector to retrieve some
>>> attributes. And when i test the attribute resolver by using "AACLI" tool i
>>> am getting "No attribute statement" all the time. I did not find any logs
>>> related to attribute retrieval in the log files.
>>>
>>> My configuration details as follows,
>>>
>>> *"handler.xml"*
>>>
>>> <ph:LoginHandler xsi:type="ph:UsernamePassword"
>>>
>>> jaasConfigurationLocation="file://IDP_HOME/conf/login.config">
>>>
>>> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
>>>     </ph:LoginHandler>
>>>
>>> *"login.config"*
>>>
>>> edu.vt.middleware.ldap.jaas.LdapLoginModule required
>>>       ldapUrl="LDAP_URL"
>>>       baseDn="ou=public,dc=abc,dc=com"
>>>       tls="true"
>>>       userFilter="uid={0}"
>>>    ;
>>>
>>> *"attribute-filter.xml"
>>>
>>> *<afp:AttributeFilterPolicy>
>>>         <afp:PolicyRequirementRule xsi:type="basic:ANY" />
>>>
>>>         <afp:AttributeRule attributeID="mail">
>>>             <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>     </afp:AttributeFilterPolicy>
>>>
>>> *"attribute-resolver.xml"
>>>
>>>
>>> * <resolver:AttributeDefinition xsi:type="ad:Simple" id="mail"
>>> sourceAttributeID="mail">
>>>         <resolver:Dependency ref="myLDAP" />
>>>     <resolver:AttributeEncoder xsi:type="SAML2String"
>>>     xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>>>             name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="mail"
>>> />
>>>     </resolver:AttributeDefinition>
>>>
>>> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
>>>         ldapURL="LDAP_URL"
>>>         baseDN="ou=public,dc=abc,dc=com"
>>>         principal="USER_NAME"
>>>         principalCredential="PASSWORD">
>>>         <dc:FilterTemplate>
>>>             <![CDATA[
>>>                 (uid=$requestContext.principalName)
>>>             ]]>
>>>         </dc:FilterTemplate>
>>>     </resolver:DataConnector>*
>>>
>>>
>>>
>>> *Even when i comment the statements in "login.config" file, i am not
>>> getting any errors in the log file and still getting "No Aattribute
>>> Statement" message. Following is the command i am using from "IDP_HOME"*
>>>
>>> aacli.bat --configDir=../conf --principal=<USER_NAME>
>>>
>>> *Could anyone please help me get this working? Am i missing something in
>>> the configruation?
>>>
>>> Thank you in advance.
>>>
>>> -- Pavan
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>>
>> --
>>
>>
>>
>>
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110816/822990b4/attachment-0001.html