IdPv3.2.1 Attribute-filter.xml stuck!

[O'Dowd, Josh]

Thanks Brent,

You nailed it.

Actually, Scott said the same thing.  It didn't click for some reason!

You guys are great.

-Josh

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Brent Putman
Sent: Wednesday, February 10, 2016 1:53 PM
To: users at shibboleth.net
Subject: Re: IdPv3.2.1 Attribute-filter.xml stuck!

I think you're stilling missing a namespace decl up top for the default namespace.  Like this, assuming that's the right namespace URI:

xmlns="urn:mace:shibboleth:2.0:afp"

This is still namespace-qualified XML, with schema validation, so any used namespace prefixes, including the default one, need to be declared.


On 2/10/16 3:44 PM, O'Dowd, Josh wrote:

I hear you on the xml editor.  I use the latest version of eclipse's xml editor.



I shortened the xml a bit more for this post:



<?xml version="1.0" encoding="UTF-8"?>



<AttributeFilterPolicyGroup xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<http://www.w3.org/2001/XMLSchema-instance>

  xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd"

  id="ShibbolethFilterPolicy">



  <!--  Release the transient ID to anyone -->

  <AttributeFilterPolicy id="releaseTransientIdToAnyone">

      <PolicyRequirementRule xsi:type="ANY"/>

      <AttributeRule attributeID="transientId">

          <PermitValueRule xsi:type="ANY"/>

      </AttributeRule>

  </AttributeFilterPolicy>



  <AttributeFilterPolicy id="releaseToAnyone">

         <PolicyRequirementRule xsi:type="ANY" />

         <AttributeRule attributeID="uid"><PermitValueRule xsi:type="ANY" /></AttributeRule>

  </AttributeFilterPolicy>



</AttributeFilterPolicyGroup>



Idp restart.  Log is showing the following error, which is really puzzling me since the AttributeFilterPolicyGroup element is definitely declared in the xsd:



2016-02-10 13:40:10,357 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.AttributeFilterS

ervice': Initial load failed

net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML

 document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 5; co

lumnNumber: 30; cvc-elt.1: Cannot find the declaration of element 'AttributeFilterPolicyGroup'.



-Josh







-----Original Message-----

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott

Sent: Wednesday, February 10, 2016 12:35 PM

To: Shib Users <users at shibboleth.net><mailto:users at shibboleth.net>

Subject: RE: IdPv3.2.1 Attribute-filter.xml stuck!



I am also seeing this error:



cvc-elt.4.2: Cannot resolve 'ANY' to a type definition for element

'afp:PolicyRequirementRule'.



That doesn't match the XML you posted (no afp: prefix in what you posted). Your issues are just XML and namespace correctness, so I suggest you try an XML editor. The schemaLocations in the new files are all usable to help validate from within editors like Oxygen.



All you need is one xmlns declaration at the top with the one namespace used, and everything else should be doable now with no prefixes.



-- Scott



--

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/ea192f50/attachment-0001.html>