Problems with parsing of attribute-filter.xml with IDP 3.2.0
Rod Widdowson
rdw at steadingsoftware.com
Thu Jul 7 11:25:48 EDT 2016
>
> <?xml version="1.0" encoding="UTF-8"?>
> <afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
> xmlns="urn:mace:shibboleth:2.0:afp"
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp
classpath:/opt/shibboleth-
> idp/schema/shibboleth-2.0-afp.xsd">
>
> <!-- Release the transient ID to anyone -->
> <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone">
> <afp:PolicyRequirementRule xsi:type="basic:ANY"/>
> <afp:AttributeRule attributeID="transientId"><afp:PermitValueRule
> xsi:type="basic:ANY"/> </afp:AttributeRule>
> <afp:AttributeRule attributeID="myID"><afp:PermitValueRule
> xsi:type="basic:ANY" /></afp:AttributeRule>
> <afp:AttributeRule attributeID="myRole"> <afp:PermitValueRule
> xsi:type="basic:ANY" /></afp:AttributeRule>
> </afp:AttributeFilterPolicy>
>
> </afp:AttributeFilterPolicyGroup>
You're in a bit of a namespace mess:
Firstly all your elements have an "afp:" prefix which you haven't declared,
rather you have made it he default namespace. So get rid of afp: from all
your elements.
Next you are using "basic:" in your types so you need either to declare it
or strip it out and replace the types appropriately as per
https://wiki.shibboleth.net/confluence/display/IDP30/AttributeFilterLegacyNa
meSpaceMapping
More information about the users
mailing list