too simple resolver def?
Christopher Bongaarts
cab at umn.edu
Tue Jul 29 18:50:06 EDT 2014
On 7/29/2014 5:36 PM, David Bantz wrote:
> I don’t see what’s wrong with the following resolver definition:
>
> <resolver:AttributeDefinition id="AWSsessionID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
> sourceAttributeID="uakPersonID">
> <resolver:Dependency ref="uakPersonID" />
> <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
> name="https://aws.amazon.com/SAML/Attributes/RoleSessionName"
> friendlyName="AWSsessionID">
> </resolver:AttributeEncoder>
> </resolver:AttributeDefinition>
>
> but it produces the following error attempting to load:
>
> ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeResolver service, error creating components. The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.1: Element 'resolver:AttributeEncoder' must have no character or element information item [children], because the type's content type is empty.
>
> Comment out this definition and the resolver loads…I must be missing something obvious, but haven’t seen it.
Should that be:
<resolver:AttributeEncoder ... />
instead of having an opening and ending tag?
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%
More information about the users
mailing list