too simple resolver def?

[David Bantz]

On Tue, 29 Jul 2014, at 14:50 , Christopher Bongaarts <cab at umn.edu> wrote:

>> ...
>>     <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>>                               name="https://aws.amazon.com/SAML/Attributes/RoleSessionName"
>>                               friendlyName="AWSsessionID">
>>     </resolver:AttributeEncoder>
...
> 
> Should that be:
> <resolver:AttributeEncoder ... />
> instead of having an opening and ending tag?
> 

On Tue, 29 Jul 2014, at 14:48 , Kevin Foote <kpfoote at uoregon.edu> wrote:

> 
>> xmlns="urn:mace:shibboleth:2.0:attribute:encoder”
> 
> You can probably remove this since it should be included at the top of the doc. 
> 
>> </resolver:AttributeEncoder>
> 
> I think its telling you to put the entire AttributeEncoder in one xml statement ending in “/>”

Thank you Chris and Kevin - That was definitely a good hint, as the definition loads with the encoder in a single statement.

But the following has (now mysteriously) worked and continues to work (in fact was the template for the new one that did not work):

<resolver:AttributeDefinition id="eduPersonUniqueId" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" 
                              sourceAttributeID="uakPersonID">
        <resolver:Dependency ref="uakPersonID" />
        <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
              name="urn:oid:1.3.6.1.4.1.5923.1.1.1.13" friendlyName="eduPersonUniqueId"></resolver:AttributeEncoder>
</resolver:AttributeDefinition>

that is, as far as I can tell, a definition identical to one that produced the error except for the attribute names.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140729/c144f91b/attachment.bin