too simple resolver def?

David Bantz dabantz at alaska.edu
Tue Jul 29 18:36:18 EDT 2014


I don’t see what’s wrong with the following resolver definition:

<resolver:AttributeDefinition id="AWSsessionID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
                              sourceAttributeID="uakPersonID">
    <resolver:Dependency ref="uakPersonID" />
    <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                              name="https://aws.amazon.com/SAML/Attributes/RoleSessionName" 
                              friendlyName="AWSsessionID">
    </resolver:AttributeEncoder>
</resolver:AttributeDefinition>

but it produces the following error attempting to load:

ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeResolver service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.1: Element 'resolver:AttributeEncoder' must have no character or element information item [children], because the type's content type is empty.

Comment out this definition and the resolver loads…I must be missing something obvious, but haven’t seen it.  Thanks for pointers.

David Bantz


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140729/71d7edbd/attachment.bin 


More information about the users mailing list