New warning message after upgrade from 3.2.1.1 to 3.3 on Windows (MSI Installer)
Michael A Grady
mgrady at unicon.net
Thu Dec 15 11:11:53 EST 2016
Upgraded a Test IdP to 3.3 (from 3.2.1.1) on Windows, and seeing the following in the idp-warn.log now that I don't recall seeing in 3.2.x:
WARN [net.shibboleth.ext.spring.config.StringBooleanToPredicateConverter:51] - Unrecognized value 'google.com/a/campus.edu' converted to false; if intentional, explicitly use 'false'
That Google entityID is referenced in attribute-filter.xml, saml-nameid.xml, and in relying-party.xml. (And, of course, in metadata.) Which of the following is it warning about? Doesn't seem like we'll get the expected result based on that message:
attribute-filter.xml
<PolicyRequirementRule xsi:type="OR">
<Rule xsi:type="Requester" value="google.com/a/campus.edu" />
<Rule xsi:type="Requester" value="http://www.instructure.com/saml2" />
<Rule xsi:type="Requester" value="http://www.webex.com/campus" />
</PolicyRequirementRule>
saml-nameid.xml
<property name="activationCondition">
<bean id="needPrincipalNameId" parent="shibboleth.Conditions.RelyingPartyId">
<constructor-arg>
<list>
<value>google.com/a/campus.edu</value>
<value>http://www.instructure.com/saml2</value>
<value>http://www.webex.com/campus</value>
</list>
</constructor-arg>
</bean>
</property>
relying-party.xml
<bean parent="RelyingPartyByName"
c:relyingPartyIds="#{{
'google.com/a/campus.edu',
'http://www.instructure.com/saml2',
'http://www.webex.com/campus'
}}">
--
Michael A. Grady
IAM Architect, Unicon, Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://shibboleth.net/pipermail/users/attachments/20161215/962b2d97/attachment.sig>
More information about the users
mailing list