Getting the problem in attribute-resolver.xml
Surinaidu Majji
pioneer.suri at gmail.com
Mon Dec 15 04:04:36 EST 2014
Hello All,
I got very useful information for my last query(
http://shibboleth.1660669.n2.nabble.com/Better-approach-to-do-Authorization-in-shibboleth-td7609474.html
).
Based on the suggestions given by many people i started doing changes in
"attribute-resolver.xml" and "attribute-filter.xml" to get the required
attributes at SP side. I added the following Restful webservice
Dataconnector and attribute-definition to the attribute-resolver.xml.
<resolver:AttributeDefinition id="systemSettingData" xsi:type="ad:Simple"
sourceAttributeID="systemSetting">
<resolver:Dependency ref="gws" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:systemSettingData" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:2.5.4.43" friendlyName="systemSettingData" />
</resolver:AttributeDefinition>
<resolver:DataConnector xsi:type="WebService" id="gws"
xmlns="urn:mace:washington.edu:idp:resolver:dc"
authenticationType="NONE"
baseURL="http://ipaddress:port/url"
maxConnections="5"
maxResultSize="100"
mergeResults="true"
cacheResults="false"
username="user"
password="pass">
<QueryTemplate>
<![CDATA[
group_sws/v1/search?member=${requestContext.principalName}&type=effective]]>
</QueryTemplate>
<!-- <uwdc:TrustCredential xsi:type="X509Filesystem"
xmlns="urn:mace:shibboleth:2.0:security" id="UWCACredential">
<Certificate>/data/local/idp/credentials/uwca.crt</Certificate>
</uwdc:TrustCredential> -->
<!-- <uwdc:AuthenticationCredential xsi:type="X509Filesystem"
xmlns="urn:mace:shibboleth:2.0:security" id="Urizen3Credential">
<PrivateKey>/data/local/idp/credentials/urizen3.ck</PrivateKey>
<Certificate>/data/local/idp/credentials/urizen3.ck</Certificate>
</uwdc:AuthenticationCredential> -->
<Attribute name="systemSetting" xPath="maxDiskSize" />
</resolver:DataConnector>
I have added the required attribute-filter policy in the
attribute-filter.xml. We also have 'principal' attribute-definition in
attribute-resolver.xml along with the above connector. Earlier we used to
get principal(attributes) at SP side which have been set at the
LoginHandler.Principal_Key(AuthenticationEngine).
After adding the additional above restful dataconector, i am even not
getting the previous attribute(principal) at SP side. I know my restful
dataconnector is not the exact one but i could not able to figure out what
is the reason for not getting the 'principal' also?
Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141215/11e36b8b/attachment.html
More information about the users
mailing list