error from eduPersonScopedAffiliation in IDP 3.1.2

[Hong Ye]

Hi,

We are running IDP 3.1.2 in our test environment. When user’s eduPersonAffiliaiton is empty, attribute resolver generated error when trying to resolve eduPersonScopedAffiliation. The error caused none of the attribute/value is released to the SP. This behavior is different than IDP 2.4.x.

2015-08-17 10:52:11,480 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:256] - Profile Action ResolveAttributes: Error resolving attributes
net.shibboleth.idp.attribute.resolver.ResolutionException: net.shibboleth.idp.attribute.UnsupportedAttributeTypeException: Attribute Definition 'eduPersonScopedAffiliation':This attribute definition only supports attribute value types of net.shibboleth.idp.attribute.StringAttributeValue not values of type net.shibboleth.idp.attribute.EmptyAttributeValue
        at net.shibboleth.idp.attribute.resolver.ad.impl.ScopedAttributeDefinition.doAttributeDefinitionResolve(ScopedAttributeDefinition.java:91)
Caused by: net.shibboleth.idp.attribute.UnsupportedAttributeTypeException: Attribute Definition 'eduPersonScopedAffiliation':This attribute definition only supports attribute value types of net.shibboleth.idp.attribute.StringAttributeValue not values of type net.shibboleth.idp.attribute.EmptyAttributeValue
        at net.shibboleth.idp.attribute.resolver.ad.impl.ScopedAttributeDefinition.doAttributeDefinitionResolve(ScopedAttributeDefinition.java:91)


<resolver:AttributeDefinition id="eduPersonScopedAffiliation"
        xsi:type="ad:Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
        scope="%{idp.scope}" sourceAttributeID="eduPersonAffiliation">

        <resolver:Dependency ref="myLDAP" />

        <resolver:AttributeEncoder xsi:type="SAML1String"
            xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
            name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" encodeType="false" />

        <resolver:AttributeEncoder xsi:type="SAML2String"
            xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
            name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
            friendlyName="eduPersonScopedAffiliation" encodeType="false" />

    </resolver:AttributeDefinition>


Thanks
Hong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150817/ed2733e9/attachment.html>