too simple resolver def?

Christopher Bongaarts cab at umn.edu
Tue Jul 29 18:50:06 EDT 2014


On 7/29/2014 5:36 PM, David Bantz wrote:
> I don’t see what’s wrong with the following resolver definition:
>
> <resolver:AttributeDefinition id="AWSsessionID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>                                sourceAttributeID="uakPersonID">
>      <resolver:Dependency ref="uakPersonID" />
>      <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>                                name="https://aws.amazon.com/SAML/Attributes/RoleSessionName"
>                                friendlyName="AWSsessionID">
>      </resolver:AttributeEncoder>
> </resolver:AttributeDefinition>
>
> but it produces the following error attempting to load:
>
> ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeResolver service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.1: Element 'resolver:AttributeEncoder' must have no character or element information item [children], because the type's content type is empty.
>
> Comment out this definition and the resolver loads…I must be missing something obvious, but haven’t seen it.

Should that be:
<resolver:AttributeEncoder ... />
instead of having an opening and ending tag?

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%



More information about the users mailing list