Problems with parsing of attribute-filter.xml with IDP 3.2.0

Rod Widdowson rdw at steadingsoftware.com
Thu Jul 7 11:25:48 EDT 2016


> 
> <?xml version="1.0" encoding="UTF-8"?>
> <afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
>     xmlns="urn:mace:shibboleth:2.0:afp"
>     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>     xsi:schemaLocation="urn:mace:shibboleth:2.0:afp
classpath:/opt/shibboleth-
> idp/schema/shibboleth-2.0-afp.xsd">
> 
>     <!--  Release the transient ID to anyone -->
>     <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone">
>         <afp:PolicyRequirementRule xsi:type="basic:ANY"/>
>         <afp:AttributeRule attributeID="transientId"><afp:PermitValueRule
> xsi:type="basic:ANY"/> </afp:AttributeRule>
>         <afp:AttributeRule attributeID="myID"><afp:PermitValueRule
> xsi:type="basic:ANY" /></afp:AttributeRule>
>         <afp:AttributeRule attributeID="myRole">    <afp:PermitValueRule
> xsi:type="basic:ANY" /></afp:AttributeRule>
>     </afp:AttributeFilterPolicy>
> 
> </afp:AttributeFilterPolicyGroup>

You're in a bit of a namespace mess:  

Firstly all your elements have an "afp:" prefix which you haven't declared,
rather you have made it he default namespace.  So get rid of afp: from all
your elements.

Next you are using "basic:" in your types so you need either to declare it
or strip it out and replace the types appropriately as per

https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterLegacyNa
meSpaceMapping






More information about the users mailing list