attribute-filter.xml parsing error

[Kent Nasveschuk]

I went through this with you a long time ago, you checked the syntax and couldn't find anything wrong. Suggested upgrading to the 2.4 version. I finally gave up and just created duplicate entries. I tried again recently. Same outcome. 

OK, so it is not a java problem 

Should below work? 

<afp:AttributeFilterPolicy id="release-policy1"> 
<afp:PolicyRequirementRule xsi:type="basic:OR"> 
<basic:Rule xsi:type="basic:AttributeRequesterString" value="https://entityID-1"/> 
<basic:Rule xsi:type="basic:AttributeRequesterString" value="https://entityID-2"/> 
</afp:PolicyRequirementRule> 
<afp:AttributeRule attributeID="email"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
<afp:AttributeRule attributeID="givenName"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
<afp:AttributeRule attributeID="surname"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
<afp:AttributeRule attributeID="commonName"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
<afp:AttributeRule attributeID="displayName"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
<afp:AttributeRule attributeID="eduPersonPrincipalName"> 
<afp:PermitValueRule xsi:type="basic:ANY"/> 
</afp:AttributeRule> 
</afp:AttributeFilterPolicy> 

I get this: 

11:09:22.453 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.filtering.AttributeFilterPolicyBeanDefinitionParser:72] - Parsing configuration for attribute filter policy release-policy1 
11:09:22.455 - ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeFilterEngine service, error creating components. The root cause of this error was: org.springframework.beans.factory.BeanCreationException: RuleReference elements within an AND rule are not supported 


----- Original Message -----

From: "Scott Cantor" <cantor.2 at osu.edu> 
To: "Shib Users" <users at shibboleth.net> 
Sent: Monday, February 24, 2014 10:46:13 AM 
Subject: Re: attribute-filter.xml parsing error 

On 2/24/14, 10:39 AM, "Kent Nasveschuk" <knasveschuk at mbl.edu> wrote: 

>I've always had problems with this just wondering if anyone else has 
>experienced the same and or what I can do to resolve it 

The issue is with your syntax (and some issues with the schema that make 
this harder than it should be). 

>Any use of AND or OR in attribute-filter.xml usually ends in an error 
>message something to the effect "unsupported". Nested rules don't work. 

Yes, they do. I use them. 

>There is no use in going over the syntax again because it just doesn't 
>work with my current system. Even the simplest configuration, throws an 
>error. 

Feel free to ignore me then, but going over the syntax is the only fix. 

The usual mistake is not using <basic:Rule> in the nested elements, IIRC. 

-- Scott 


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140224/4897f728/attachment.html