IdPv3.2.1 Attribute-filter.xml stuck!

[Brent Putman]

I think you're stilling missing a namespace decl up top for the default
namespace.  Like this, assuming that's the right namespace URI:

xmlns="urn:mace:shibboleth:2.0:afp"

This is still namespace-qualified XML, with schema validation, so any
used namespace prefixes, including the default one, need to be declared.



On 2/10/16 3:44 PM, O'Dowd, Josh wrote:
> I hear you on the xml editor.  I use the latest version of eclipse's xml editor.
>
> I shortened the xml a bit more for this post:
>
> <?xml version="1.0" encoding="UTF-8"?>
>
> <AttributeFilterPolicyGroup xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> 	xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd"
> 	id="ShibbolethFilterPolicy">
>
> 	<!--  Release the transient ID to anyone -->
> 	<AttributeFilterPolicy id="releaseTransientIdToAnyone">
> 	    <PolicyRequirementRule xsi:type="ANY"/>
> 	    <AttributeRule attributeID="transientId">
> 	        <PermitValueRule xsi:type="ANY"/>
> 	    </AttributeRule>
> 	</AttributeFilterPolicy>
>
> 	<AttributeFilterPolicy id="releaseToAnyone">
> 		<PolicyRequirementRule xsi:type="ANY" />
> 		<AttributeRule attributeID="uid"><PermitValueRule xsi:type="ANY" /></AttributeRule>
> 	</AttributeFilterPolicy>
>
> </AttributeFilterPolicyGroup>
>
> Idp restart.  Log is showing the following error, which is really puzzling me since the AttributeFilterPolicyGroup element is definitely declared in the xsd:
>
> 2016-02-10 13:40:10,357 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.AttributeFilterS
> ervice': Initial load failed
> net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML
>  document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 5; co
> lumnNumber: 30; cvc-elt.1: Cannot find the declaration of element 'AttributeFilterPolicyGroup'.
>
> -Josh
>
>
>
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Wednesday, February 10, 2016 12:35 PM
> To: Shib Users <users at shibboleth.net>
> Subject: RE: IdPv3.2.1 Attribute-filter.xml stuck!
>
>> I am also seeing this error:
>>
>> cvc-elt.4.2: Cannot resolve 'ANY' to a type definition for element 
>> 'afp:PolicyRequirementRule'.
> That doesn't match the XML you posted (no afp: prefix in what you posted). Your issues are just XML and namespace correctness, so I suggest you try an XML editor. The schemaLocations in the new files are all usable to help validate from within editors like Oxygen.
>
> All you need is one xmlns declaration at the top with the one namespace used, and everything else should be doable now with no prefixes.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/db17c598/attachment.html>