includeConditionsNotBefore=false not allowed in ProfileConfiguration

Pablo Millet pablo.millet at gu.se
Thu Jan 29 11:39:31 EST 2015



Den 2015-01-29 16:42 skrev Cantor, Scott <cantor.2 at osu.edu>:

>> The log says:
>> 
>> 5:50:54.655 - ERROR
>> [edu.internet2.middleware.shibboleth.common.config.BaseService:187] -
>> Configuration was not loaded for
>> shibboleth.RelyingPartyConfigurationManager service, error creating
>> components.  The root cause of this error was:
>> org.xml.sax.SAXParseException: cvc-complex-type.3.2.2: Attribute
>> 'includeConditionsNotBefore' is not allowed to appear in element
>> 'ProfileConfiguration'.
>
>Assuming there's no mistype, and assuming you're not putting the setting
>on a profile element for a profile that doesn't support it (no idea what
>that might be), then my Occam's Razor conclusion would likely be that
>you're not running the version you think you are.
>
>There's no additional work required to make new settings work, the
>schemas should be inside the upgraded jars.
>
>-- Scott


I see shibboleth-identityprovider-2.4.3.jar in MY_SHIB_HOME/lib

Also, running /MY_SHIB_HOME/bin/version.sh says:
shibboleth-identityprovider version 2.4.3

What do I look for in jars schemas?


Is there any other tricks to check and be 100% sure what version i¹m
running?

Example on DefaultRelayingParty- includeConditionsNotBefore as last
attribute.

<ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true"
assertionLifetime="300000"
assertionProxyCount="0"
signResponses="conditional"
signAssertions="never"
encryptAssertions="conditional"
encryptNameIds="conditional²
includeConditionsNotBefore="false"/>


 - Pablo



More information about the users mailing list