IdPv3.2.1 Attribute-filter.xml stuck!

[O'Dowd, Josh]

A clarification on my earlier issue post...

We are actually running v3.2.0

..and..

I am also seeing this error:
cvc-elt.4.2: Cannot resolve 'ANY' to a type definition for element 'afp:PolicyRequirementRule'.

-Josh

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of O'Dowd, Josh
Sent: Wednesday, February 10, 2016 10:44 AM
To: users at shibboleth.net
Subject: IdPv3.2.1 Attribute-filter.xml stuck!

Hi Guys,

I am just looking for another set of eye on this, cuz I am just not getting it right for some reason...

I am following the guidance of https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterLegacyNameSpaceMapping in an attempt to clean up our filter and add some new elements.  This is what is not working for me:

Attribute-filter.xml:
<?xml version="1.0" encoding="UTF-8"?>

<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd">

                <!--  Release the transient ID to anyone -->
                <AttributeFilterPolicy id="releaseTransientIdToAnyone">
                    <PolicyRequirementRule xsi:type="ANY"/>
                    <AttributeRule attributeID="transientId">
                        <PermitValueRule xsi:type="ANY"/>
                    </AttributeRule>
                </AttributeFilterPolicy>

                <AttributeFilterPolicy id="releaseToAnyone">
                                <PolicyRequirementRule xsi:type="ANY" />
                                <AttributeRule attributeID="uid"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="sn"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="givenName"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="mail"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonPrincipalName"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonAffiliation"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="eduPersonPrimaryAffiliation"><PermitValueRule xsi:type="ANY" /></AttributeRule>
                                <AttributeRule attributeID="isMemberOf"><PermitValueRule xsi:type="ANY"/></AttributeRule>
                </AttributeFilterPolicy>
</AttributeFilterPolicyGroup>

Any advice on what might be the problem.  All I am getting from idp-process.log is:

2016-02-10 10:35:21,790 - ERROR [net.shibboleth.idp.profile.impl.FilterAttributes:312] - Profile Action FilterAttributes: Error encountered while filtering attributes : Invalid Attribute Filter configuration
2016-02-10 10:35:21,791 - WARN [net.shibboleth.idp.profile.impl.FilterAttributes:315] - Filter error masked, clearing resolved attributes

Thanks.

Josh O'Dowd
Software Systems Engineer
Central IT, University of Montana
(406)243-6283

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/2e68f6c2/attachment.html>