Dependency in Attribute def

David Bantz dabantz at alaska.edu
Fri Aug 29 15:27:55 EDT 2014


This

<resolver:AttributeDefinition
       id="oktanameid"
       xsi:type="Script"
       xmlns="urn:mace:shibboleth:2.0:resolver:ad"
       sourceAttributeID="UASystemID"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xmlns:resolver="urn:mace:shibboleth:2.0:resolver">
       <resolver:Dependency ref="myLDAP" />
       <resolver:Dependency ref="UASystemID" /> ...

produces the following error (preventing loading of the attribute-resolver):

org.xml.sax.SAXParseException: cvc-identity-constraint.4.3: Key 'AttributeDefinitionAttributeDefinitionDependencyRef' with value 'UASystemID' not found for identity constraint of element 'AttributeResolver'.

but seems unexceptional and closely parallel to other definitions such as this example from the wiki:

https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples#ResolverScriptAttributeDefinitionExamples-GenerateUniqueOpaqueIdentifier :
<resolver:AttributeDefinition xsi:type="Script" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
                              id="swissEduPersonUniqueID"
                              sourceAttributeID="uidNumber">
    <!-- Dependency that provides the source attribute. -->
    <resolver:Dependency ref="myLDAP" />
    <resolver:Dependency ref="uidNumber" /> ...

UASystemID is used successfully in other attribute definitions, like:
    <resolver:AttributeDefinition id="uaUsername" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
            sourceAttributeID="UASystemID">
       <resolver:Dependency ref="myLDAP" /> ...

What did I fumble?

David Bantz
UAlaska IAM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140829/29508cee/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140829/29508cee/attachment-0001.bin 


More information about the users mailing list