ResultCache values not reflecting LDAP values

[David Bantz]

On Wed, 9 Jul 2014, at 10:14 , Daniel Fisher <dfisher at vt.edu> wrote:
> 
> What does your resolver and cache configuration look like?
...
<!-- Schema: eduPerson attributes -->
    <resolver:AttributeDefinition id="eduPersonAffiliation" xsi:type="Script" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
        sourceAttributeID="eduPersonAffiliation">
        <resolver:Dependency ref="myLDAP" />
<!-- Do not encode ePA directly; rather, use uakePA with processing to add Member or Affiliate as appropriate
     We need to retain the definnition, though, because other attributes (including uakePA) have ePA dependency.

        <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
            name="urn:mace:dir:attribute-def:eduPersonAffiliation" />

        <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
            name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" friendlyName="eduPersonAffiliation" />
-->
     <Script>
        <![CDATA[
        importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);
        importPackage(Packages.org.slf4j);
        if (eduPersonAffiliation == null) {eduPersonAffiliation = new BasicAttribute("eduPersonAffiliation");}
        ]]>
    </Script>
    </resolver:AttributeDefinition>
...
<!--  LDAP Connector to edir, a multi-node cluster of LDAP directories -->
    <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver:dc"
                                ldapURL="ldaps://edir.alaska.edu:636" baseDN="ou=people,dc=alaska,dc=edu" 
                                principal="uid=shibboleth03,ou=resource,dc=alaska,dc=edu" principalCredential="These are not the credentials you’re looking for">
                        <resolver:FailoverDataConnector ref="FailoverStaticConnector" />
        <FilterTemplate>
            <![CDATA[
            (|(uid=$requestContext.principalName)(uasystemid=$requestContext.principalName)(bannerid=$requestContext.principalName))
            ]]>
        </FilterTemplate>
<!--   <ResultCache elementTimeToLive="PT1H" maximumCachedElements="100"/> -->
    </resolver:DataConnector>

Cache statement is currently commented out, which resolved the functional failure.

David Bantz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140709/f78b3f75/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140709/f78b3f75/attachment-0001.bin