FYI: simple resolver issue?

David Bantz dabantz at alaska.edu
Mon Oct 29 19:10:52 EDT 2012


Sorry, the missing space was an artifact of pasting into email.

The culprit is Directory ACI.  The credential used by the IdP 
doesn't have a Directory "role" attribute permitting it to see the appropriate LDAP attribute.

D'OH!

David Bantz
UA OIT IAM

On Mon, 29 Oct 2012, at 08:59 , Tom Poage <tfpoage at ucdavis.edu> wrote:

> Cut-n-paste artifact? There's no space between the 'name' and 
> 'friendlyName' attributes.
> 
> Tom.
> 
> On 10/26/2012 06:19 PM, David Bantz wrote:
>> Maybe I just need another set of eyes to look at this. I have a simple resolver
>> that is not resolving attribute values:
>> 
>> 
>> <resolver:AttributeDefinition
>> id="mailroutingaddress"xsi:type="Simple"xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>> sourceAttributeID="mailRoutingAddress">
>> <resolver:Dependency ref="myLDAP" />
>> <resolver:AttributeEncoder
>> xsi:type="SAML1String"xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>> name="urn:mace:alaska.edu:attributes:mailroutingaddress"/>
>> <resolver:AttributeEncoder
>> xsi:type="SAML2String"xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>> name="urn:mace:alaska.edu:attributes:mailroutingaddress"friendlyName="mailroutingaddress"/>
>> </resolver:AttributeDefinition>
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list