Shibboleth 2.4.4 and problems with scripts.

Josef Karliak karliak at ajetaci.cz
Mon Nov 30 06:36:08 EST 2015


  Good afternoon,
  in Shibboleth IDP I generate some attribute by the script:
  <Script><![CDATA[
importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);
    eduPersonEntitlement = new BasicAttribute("eduPersonEntitlement");
    eduPersonEntitlement.getValues().add("urn:mace:terena.org:tcs:escience-user");
  ]]></Script>

  but in the idp-process.log there are some complains about executing script:

11:36:09.013 - DEBUG [edu.vt.middleware.ldap.Ldap:198] -   handler =
[edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at b79d622,
edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler at 4c7872e0,
edu.vt.middleware.ldap.handler.BinarySearchResultHandler at 765872f2]
11:36:09.029 - ERROR
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition:136]
- ScriptletAttributeDefinition eduPersonEntitlement unable to execute
script
javax.script.ScriptException: ReferenceError: "importPackage" is not
defined in <eval> at line number 1
        at
jdk.nashorn.api.scripting.NashornScriptEngine.throwAsScriptException(NashornScriptEngine.java:467)
~[nashorn.jar:na]
        at
jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:423)
~[nashorn.jar:na]
        at
jdk.nashorn.api.scripting.NashornScriptEngine.access$300(NashornScriptEngine.java:73)
~[nashorn.jar:na]
        at
jdk.nashorn.api.scripting.NashornScriptEngine$3.eval(NashornScriptEngine.java:511)
~[nashorn.jar:na]
        at
edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition.doResolve(ScriptedAttributeDefinition.java:123)
~[shibboleth-common-1.4.4.jar:na]


  Without "importPackage" I've similar errors:
11:19:57.918 - DEBUG [edu.vt.middleware.ldap.Ldap:198] -   handler =
[edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 3cf98ddb,
edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler at 317483bd,
edu.vt.middleware.ldap.handler.BinarySearchResultHandler at 69ecf373]
11:19:57.935 - ERROR
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition:136]
- ScriptletAttributeDefinition eduPersonEntitlement unable to execute
script
javax.script.ScriptException: ReferenceError: "BasicAttribute" is not
defined in <eval> at line number 1
        at
jdk.nashorn.api.scripting.NashornScriptEngine.throwAsScriptException(NashornScriptEngine.java:467)
~[nashorn.jar:na]
        at
jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:423)
~[nashorn.jar:na]
        at
jdk.nashorn.api.scripting.NashornScriptEngine.access$300(NashornScriptEngine.java:73)
~[nashorn.jar:na]


  Installed java packages (opensuse 13.2 X64-bit):
java-1_8_0-openjdk-1.8.0.65-18.1.x86_64
java-1_8_0-openjdk-headless-1.8.0.65-18.1.x86_64
java-1_8_0-openjdk-plugin-1.6.1-6.2.x86_64
javapackages-tools-2.0.1-9.1.3.x86_64
libjavascriptcoregtk-1_0-0-2.4.9-10.1.x86_64
libjavascriptcoregtk-3_0-0-2.4.9-10.1.x86_64
java-1_7_0-openjdk-plugin-1.6.1-6.1.x86_64
timezone-java-2015g-32.1.noarch
java-1_7_0-openjdk-headless-1.7.0.91-13.1.x86_64
java-1_7_0-openjdk-1.7.0.91-13.1.x86_64


  Thank you for your kick to the right way.
  Best regards
  J.Karliak

  So what did I missed ?




-- 
Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a
DomainKeys/DKIM (s ADSP) a implementaci DMARC. Pokud mate problemy s
dorucenim emailu, zacnete pouzivat metody overeni puvody emailu
zminene vyse. Dekuji.
My domain use SPF (www.openspf.org) and DomainKeys/DKIM (with ADSP)
policy and implementation of the DMARC. If you've problem with sending
emails to me, start using email origin methods mentioned above. Thank
you.



More information about the users mailing list