aacli Scripted attribute

[Athanasios Douitsis]

For anyone watching this thread now or in the future, a possible good
solution would be to install openjdk8 which includes the nashhorn
interpreter as far as I can tell. By testing the aacli with that openjdk, I
no longer get the previously mentioned error that the interpreter engine
could not be created. Note, to use tomcat with the selected openjdk, the
tomcat_java_home rcvar (in rc.conf) will have to be set to something like
/usr/local/openjdk8. I haven't yet switched tomcat to openjdk8, but I
anticipate few problems. I'll report my findings for future mailing list
readers. This should also be good regardless of IdP2 or IdP3.


I do have a followup question though. I have hitherto been unable to evade
the "...produced a null attribute" error. Here is my testing attribute,
totally simple:

        <resolver:AttributeDefinition xsi:type="Script"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="testing"
sourceAttributeID="uid">

                <resolver:Dependency ref="myLDAP" />

                <resolver:AttributeEncoder xsi:type="enc:SAML1String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                    name="urn:mace:attribute-def:testing" />
                <resolver:AttributeEncoder xsi:type="enc:SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                    name="urn:oid:1.2.3.4.5.6.7.8.9" friendlyName="testing"
/>

                 <Script><![CDATA[
                    var BasicAttribute =
Java.type("edu.internet2.middleware.shibboleth.common.attribute.provider.BasicAttribute");
                    if (null == testing) testing = new
BasicAttribute("testing");
                    testing.getValues().add("whatever");
                ]]></Script>

        </resolver:AttributeDefinition>

As far as I can tell everything (variable names, attributes, etc) is named
testing, but I'm still getting the null attribute error. Any ideas? Please
tell me that I have omitted something stupid and obvious :)



Kind regards,
Athanasios




On Tue, Oct 27, 2015 at 9:06 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/27/15, 3:02 PM, "users on behalf of Athanasios Douitsis" <
> users-bounces at shibboleth.net on behalf of aduitsis at gmail.com> wrote:
>
>
>
> >Oh blimey, I am using the openjdk FreeBSD port, I guess I'm out of luck.
>
> Just install Rhino yourself into the webapp. If it was working, it was
> only working because you had the jars installed to the container.
>
> >I'll try to figure out whether I can find a jar and place it somewhere in
> the classpath. But I'm not too optimistic.
>
> You put it in the install tree in lib/ and then reinstall and redeploy the
> webapp.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Athanasios Douitsis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151029/1c59c776/attachment.html>