Getting the problem in attribute-resolver.xml

Surinaidu Majji pioneer.suri at gmail.com
Mon Dec 15 04:04:36 EST 2014


Hello All,
I got very useful information for my last query(
http://shibboleth.1660669.n2.nabble.com/Better-approach-to-do-Authorization-in-shibboleth-td7609474.html
).
Based on the suggestions given by many people i started doing changes in
"attribute-resolver.xml" and "attribute-filter.xml" to get the required
attributes at SP side. I added the following Restful webservice
Dataconnector and attribute-definition to the attribute-resolver.xml.

<resolver:AttributeDefinition id="systemSettingData" xsi:type="ad:Simple"
sourceAttributeID="systemSetting">
   <resolver:Dependency ref="gws" />
   <resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:systemSettingData" />
   <resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:2.5.4.43" friendlyName="systemSettingData" />
   </resolver:AttributeDefinition>

 <resolver:DataConnector xsi:type="WebService" id="gws"
xmlns="urn:mace:washington.edu:idp:resolver:dc"
           authenticationType="NONE"
           baseURL="http://ipaddress:port/url"
           maxConnections="5"
           maxResultSize="100"
           mergeResults="true"
           cacheResults="false"
           username="user"
           password="pass">

        <QueryTemplate>
            <![CDATA[
group_sws/v1/search?member=${requestContext.principalName}&type=effective]]>
        </QueryTemplate>

       <!--  <uwdc:TrustCredential xsi:type="X509Filesystem"
xmlns="urn:mace:shibboleth:2.0:security" id="UWCACredential">
            <Certificate>/data/local/idp/credentials/uwca.crt</Certificate>
        </uwdc:TrustCredential> -->
      <!--   <uwdc:AuthenticationCredential xsi:type="X509Filesystem"
xmlns="urn:mace:shibboleth:2.0:security" id="Urizen3Credential">
           <PrivateKey>/data/local/idp/credentials/urizen3.ck</PrivateKey>
           <Certificate>/data/local/idp/credentials/urizen3.ck</Certificate>
        </uwdc:AuthenticationCredential> -->

        <Attribute name="systemSetting" xPath="maxDiskSize" />
    </resolver:DataConnector>

I have added the required attribute-filter policy in the
attribute-filter.xml. We also have 'principal' attribute-definition in
attribute-resolver.xml along with the above connector. Earlier we used to
get principal(attributes) at SP side which have been set at the
LoginHandler.Principal_Key(AuthenticationEngine).
After adding the additional above restful dataconector, i am even not
getting the previous attribute(principal) at SP side. I know  my restful
dataconnector is not the exact one but i could not able to figure out what
is the reason for not getting the 'principal' also?



Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141215/11e36b8b/attachment.html 


More information about the users mailing list