Dependency in Attribute def

David Bantz dabantz at alaska.edu
Fri Aug 29 18:26:28 EDT 2014


Thanks Scott.   As often, it seems clear enough once you explain it!

To be explicit, deleting 
 <resolver:Dependency ref="UASystemID" />
as referring to a non-existing attribute definition, while
retaining the expression of LDAP attribute dependency by
 sourceAttributeID="UASystemID” 
removed the parse error and generated the desired result.

David Bantz
UAlaska IAM

On Fri, 29 Aug 2014, at 11:41 , Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/29/14, 3:27 PM, "David Bantz" <dabantz at alaska.edu> wrote:
>> 
>> UASystemID is used successfully in other attribute definitions, like:
>>   <resolver:AttributeDefinition
>> id="uaUsername"xsi:type="Simple"xmlns="urn:mace:shibboleth:2.0:resolver:ad
>> "
>>           sourceAttributeID="UASystemID">
>>      <resolver:Dependency
>> ref="myLDAP" /> ...
> 
> You're using it in the Dependency element, not just as a
> sourceAttributeID. The constraint violated is referring to the Dependency
> ref value, not the sourceAttributeID.
> 
> It's just catching the mistake before it happens at runtime, you specified
> a dependency on a connector or attrbute definition called UASystemUD that
> doesn't exist. That's probably a field from a data connector but not the
> name of one.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140829/045b6645/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140829/045b6645/attachment-0001.bin 


More information about the users mailing list