includeConditionsNotBefore=false not allowed in ProfileConfiguration
Pablo Millet
pablo.millet at gu.se
Thu Jan 29 11:39:31 EST 2015
Den 2015-01-29 16:42 skrev Cantor, Scott <cantor.2 at osu.edu>:
>> The log says:
>>
>> 5:50:54.655 - ERROR
>> [edu.internet2.middleware.shibboleth.common.config.BaseService:187] -
>> Configuration was not loaded for
>> shibboleth.RelyingPartyConfigurationManager service, error creating
>> components. The root cause of this error was:
>> org.xml.sax.SAXParseException: cvc-complex-type.3.2.2: Attribute
>> 'includeConditionsNotBefore' is not allowed to appear in element
>> 'ProfileConfiguration'.
>
>Assuming there's no mistype, and assuming you're not putting the setting
>on a profile element for a profile that doesn't support it (no idea what
>that might be), then my Occam's Razor conclusion would likely be that
>you're not running the version you think you are.
>
>There's no additional work required to make new settings work, the
>schemas should be inside the upgraded jars.
>
>-- Scott
I see shibboleth-identityprovider-2.4.3.jar in MY_SHIB_HOME/lib
Also, running /MY_SHIB_HOME/bin/version.sh says:
shibboleth-identityprovider version 2.4.3
What do I look for in jars schemas?
Is there any other tricks to check and be 100% sure what version i¹m
running?
Example on DefaultRelayingParty- includeConditionsNotBefore as last
attribute.
<ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true"
assertionLifetime="300000"
assertionProxyCount="0"
signResponses="conditional"
signAssertions="never"
encryptAssertions="conditional"
encryptNameIds="conditional²
includeConditionsNotBefore="false"/>
- Pablo
More information about the users
mailing list