NativeSP 2.5.5 Attribute Transforming

[O'Dowd, Josh]

I am still not having any luck with this and I am sorry to report this is not even working when I try the example that is documented at:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeResolver#NativeSPAttributeResolver-TransformAttributeResolver(Version2.5andAbove)

Using that example, my /conf/shibboleth2.xml contains:
           <AttributeResolver type="Transform" source="uid">
              <Regex match="^(.+)$" dest="uidnoe">$1</Regex>
           </AttributeResolver>

The session is showing the following:
Miscellaneous
Session Expiration (barring inactivity): 453 minute(s)
Client Address: xxxxxxxxxxxxx
SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
Identity Provider: https://logintest.umt.edu/idp/shibboleth
Authentication Time: 2015-10-26T14:58:59.052Z
Authentication Context Class: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Authentication Context Decl: (none)

Attributes
ActivityCode: 1 value(s)
cn: 1 value(s)
eduPersonAffiliation: 4 value(s)
eduPersonPrimaryAffiliation: 1 value(s)
eduPersonPrincipalName: 1 value(s)
givenName: 1 value(s)
mail: 1 value(s)
sn: 1 value(s)
uid: 1 value(s)
uidnoe: 0 value(s)
umConfidentiality: 1 value(s)

I have tried various regex match strings to try and coax some kind of result, but to no avail.

So, a couple questions...
1.  Is this a bug?

2.  If I wanted to strengthen the logging for this process in the shibd.logger, which logger would I tune?

Thanks.

-Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, October 23, 2015 3:40 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: NativeSP 2.5.5 Attribute Transforming

On 10/23/15, 5:30 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

>The Session page shows the new attribute with 0 value(s).   I guess this means the Regex is not quite right so I'll attack from that angle.  I tested the Regex in an online tester and the result showed a successful grouping-capture, but something must be different for xml schema Regex that I haven't figured out yet....

The regex engine in the library isn't good, it just happened to be there.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net