IdPv3.2.1 Attribute-filter.xml stuck!

[O'Dowd, Josh]

Hi Guys,

I am just looking for another set of eye on this, cuz I am just not getting it right for some reason...

I am following the guidance of https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterLegacyNameSpaceMapping in an attempt to clean up our filter and add some new elements.  This is what is not working for me:

Attribute-filter.xml:
<?xml version="1.0" encoding="UTF-8"?>

<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd">

                <!--  Release the transient ID to anyone -->
                <AttributeFilterPolicy id="releaseTransientIdToAnyone">
                    <PolicyRequirementRule xsi:type="ANY"/>
                    <AttributeRule attributeID="transientId">
                        <PermitValueRule xsi:type="ANY"/>
                    </AttributeRule>
                </AttributeFilterPolicy>

                <AttributeFilterPolicy id="releaseToAnyone">
                                <PolicyRequirementRule xsi:type="ANY" />
                                <AttributeRule attributeID="uid"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="sn"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="givenName"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="mail"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonPrincipalName"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonAffiliation"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonPrimaryAffiliation"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="isMemberOf"><PermitValueRule xsi:type="ANY"/></AttributeRule>
                </AttributeFilterPolicy>
</AttributeFilterPolicyGroup>

Any advice on what might be the problem.  All I am getting from idp-process.log is:

2016-02-10 10:35:21,790 - ERROR [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action FilterAttributes: Error encountered while filtering attributes : Invalid Attribute Filter configuration
2016-02-10 10:35:21,791 - WARN [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error masked, clearing resolved attributes

Thanks.

Josh O'Dowd
Software Systems Engineer
Central IT, University of Montana
(406)243-6283

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/e1574361/attachment.html>