a scripted attribute definition example from the wiki

Mark K. Miller max at psu.edu
Wed Jul 27 10:22:34 EDT 2016


I seem to be having some disappointing results with the code in the 
"examples" section at the bottom of a wiki page here:

https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition#ScriptedAttributeDefinition-V2Compatibility

I'm trying to use "Variant 1".  Using it just the way it is presented, 
results in these log messages when I start the IdP:

2016-07-27 09:51:15,346 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
     - Parsing configuration for AttributeDefinition plugin with id: eduPersonPrincipalName
2016-07-27 09:51:15,347 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
     - Parsing configuration for Dependency with pluginId: myLDAP
2016-07-27 09:51:15,347 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
     - Parsing configuration for Dependency with pluginId: eppnFromUid
2016-07-27 09:51:15,347 - WARN [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:100]
     - Attribute Definition 'eduPersonPrincipalName':
       sourceAttributeID was not specified but is required
2016-07-27 09:51:15,349 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
     - Parsing configuration for AttributeDefinition plugin with id: eppnFromUid
2016-07-27 09:51:15,349 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
     - Parsing configuration for Dependency with pluginId: myLDAP

No "ERROR"s, so what's the harm in trying to use it, right?  When I try to 
actually do anything that would release the eduPersonPrincipalName, the 
IdP logs these messages:

2016-07-27 10:01:14,747 - WARN [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:141]
     - Plugin 'eduPersonPrincipalName' was defined without a sourceAttributeID,
       but attribute 'eppnFromUid', specified as a <Dependency> will be used.
2016-07-27 10:01:14,750 - ERROR [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:158]
     - Attribute definition 'eduPersonPrincipalName' has a data connector
       dependency 'myLDAP' but no sourceAttributeID.

I can get rid of most of the 'bad stuff' just by changing the end of 
the first line of the eduPersonPrincipalName definition to include this:

sourceAttributeID="eduPersonPrincipalName"

Really???  Is that really the correct fix?  That seems "too" easy!  How 
could that have possibly been left out of the example?  Should I just edit 
that example to include it?

However, even adding the sourceAttributeID info, and having a 'functional' 
attribute, every time the eduPersonPrincipalName is released the IdP still 
logs this message:

2016-07-27 10:15:27,593 - WARN [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:144]
     - Plugin 'eduPersonPrincipalName' was defined with a sourceAttributeID
       'eduPersonPrincipalName', but the attribute definition
       'eppnFromUid', specified as a <Dependency> will be used as well.

Sadly, I have not found a way to eliminate this unwanted warning.  Can 
anyone tell me how to get rid of this?

Thanks,

Max


More information about the users mailing list