Working 3.1.1 IDP upgrade to 3.2.0 now broken

Cantor, Scott cantor.2 at osu.edu
Thu Dec 3 12:10:16 EST 2015


On 12/3/15, 11:07 AM, "users on behalf of Grau, Roderick" <users-bounces at shibboleth.net on behalf of rgrau at albany.edu> wrote:



>Warning in idp-process.log:
>2015-12-03 10:25:30,448 - WARN [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:100] - Attribute Definition 'OPEID': sourceAttributeID was not specified but is required
>
>OPEID is a static data connector.

Yes, but the thing depending on it isn't.

>Error after trying to log into a SP:
>2015-12-03 10:29:06,215 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:388] - Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving dependencies for 'OPEID'
>2015-12-03 10:29:06,224 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
>net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Data connector dependencies must specify a dependant attribute ID
>        at net.shibboleth.utilities.java.support.logic.Constraint.isTrue(Constraint.java:262)

Please file a bug, that shouldn't be a runtime exception, it's just not being caught earlier.

>According to the wiki (https://wiki.shibboleth.net/confluence/display/IDP30/StaticDataConnector) static data connectors do not get sourceAttributeIDs.

That isn't what it's complaining about.

>Adding a sourceAttributeID to the data connector causes this error in idp-process.log:

It isn't telling you to. There is no such concept, as you more or less were assuming.

-- Scott



More information about the users mailing list