too simple resolver def?
David Bantz
dabantz at alaska.edu
Tue Jul 29 18:36:18 EDT 2014
I don’t see what’s wrong with the following resolver definition:
<resolver:AttributeDefinition id="AWSsessionID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="uakPersonID">
<resolver:Dependency ref="uakPersonID" />
<resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="https://aws.amazon.com/SAML/Attributes/RoleSessionName"
friendlyName="AWSsessionID">
</resolver:AttributeEncoder>
</resolver:AttributeDefinition>
but it produces the following error attempting to load:
ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeResolver service, error creating components. The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.1: Element 'resolver:AttributeEncoder' must have no character or element information item [children], because the type's content type is empty.
Comment out this definition and the resolver loads…I must be missing something obvious, but haven’t seen it. Thanks for pointers.
David Bantz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140729/71d7edbd/attachment.bin
More information about the users
mailing list