problem using a property metadata-providers.xml (idp 3.1.2)

Liam Hoekenga liamr at umich.edu
Tue Sep 15 15:11:59 EDT 2015


We have a medata provider defined in metadata-providers.xml:

    <MetadataProvider id="localFed"
xsi:type="FileBackedHTTPMetadataProvider"
backingFile="%{federation.md.file}" metadataURL="%{federation.md.URL}">
        <MetadataFilter xsi:type="SignatureValidation"
certificateFile="/etc/pki/tls/certs/localFed.pem"/>
        <MetadataFilter xsi:type="EntityRoleWhiteList">
            <RetainedRole>md:SPSSODescriptor</RetainedRole>
        </MetadataFilter>
    </MetadataProvider>

We're trying to define the backingFile and metadataURL values using
properties.  It seems that shib is doing string validation before it
inserts the property value:

2015-09-15 15:01:02,279 - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:181]
- Service 'shibboleth.MetadataResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line
13 in XML document from file
[/usr/local/shibboleth-idp/conf/metadata-providers.xml] is invalid; nested
exception is org.xml.sax.SAXParseException; lineNumber: 13; columnNumber:
157; cvc-datatype-valid.1.2.1: '%{federation.md.URL}' is not a valid value
for 'anyURI'.
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)
Caused by:
org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line
13 in XML document from file
[/usr/local/shibboleth-idp/conf/metadata-providers.xml] is invalid; nested
exception is org.xml.sax.SAXParseException; lineNumber: 13; columnNumber:
157; cvc-datatype-valid.1.2.1: '%{federation.md.URL}' is not a valid value
for 'anyURI'.
at
org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)
Caused by: org.xml.sax.SAXParseException: cvc-datatype-valid.1.2.1:
'%{federation.md.URL}' is not a valid value for 'anyURI'.
at
com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:203)


Should this work?
Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150915/ea8b9b65/attachment.html>


More information about the users mailing list