NativeSP 2.5.5 Attribute Transforming

[O'Dowd, Josh]

Good Afternoon,

I am attempting to configure one of our NativeSP implementations, running v2.5.5, for AttributeResolution using the "Transform" plugin.  The goal is to transform the value of the incoming 'uid' attribute to the first 8 characters of its original value for one of the applications running under this SP.

I have the following prereqs according to my understanding of the setup:

In /etc/shibboleth/shibboleth2.xml:
                <SPConfig ...>
                ..
                ..
<OutOfProcess>
           <Extensions>
              <!-- Shared library for using optional NativeSP plugins -->
              <Library path="plugins.so" fatal="true"/>
           </Extensions>
</OutOfProcess>
..
<ApplicationDefaults>
                                ..
                                <ApplicationOverride id="secure2">
<Sessions lifetime="28800" timeout="3600" checkAddress="false" handlerURL="/secure2/Shibboleth.sso" handlerSSL="true" />

                <!-- Transform AttributeResolver for 'uid' attribute -->
                <AttributeResolver type="Transform" source="uid">
                                <Regex match="^(.{8})" dest="uid"/>
                </AttributeResolver>
</ApplicationOverride>

</ApplicationDefaults>

..
..
</SPConfig>

While I have confirmed the regex is grouping a proper 8 character match, the 'uid' attribute value is not being transformed and is arriving at the application with its original value.

Any help is much appreciated.

Thanks.


Josh O'Dowd
Systems Analyst, Developer
Central IT, University of Montana
(406)243-6283

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151023/3ef51575/attachment.html>