error in attribute resolver after upgraded to IDP 3.0

Rod Widdowson rdw at steadingsoftware.com
Wed Jan 14 13:21:58 EST 2015


Well that was exciting.  The trouble comes with the name for this encoder:

<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
   name="skillsoftdept"
   friendlyName="dept name for skillsoft"
   nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" />

By giving it the name "skillsoftdept", you override the name of the
attribute "skillsoftdept".  So when the attribute resolver goes to resolve
the dependencies it say: "I don't see an attribute called skillsoftdept,
just this encoder".  Bang

Actually, I'm surprised that this worked in V2, but for now change that name
to something else and you should be all set.    I'll do a fuller analysis as
it why it worked in V2 and report back.   If I can find a way of removing
the regression we'll fix it.

Rod



More information about the users mailing list