a scripted attribute definition example from the wiki
Mark K. Miller
max at psu.edu
Wed Jul 27 10:22:34 EDT 2016
I seem to be having some disappointing results with the code in the
"examples" section at the bottom of a wiki page here:
https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition#ScriptedAttributeDefinition-V2Compatibility
I'm trying to use "Variant 1". Using it just the way it is presented,
results in these log messages when I start the IdP:
2016-07-27 09:51:15,346 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: eduPersonPrincipalName
2016-07-27 09:51:15,347 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP
2016-07-27 09:51:15,347 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: eppnFromUid
2016-07-27 09:51:15,347 - WARN [net.shibboleth.idp.attribute.resolver.spring.ad.BaseAttributeDefinitionParser:100]
- Attribute Definition 'eduPersonPrincipalName':
sourceAttributeID was not specified but is required
2016-07-27 09:51:15,349 - INFO [net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: eppnFromUid
2016-07-27 09:51:15,349 - INFO [net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP
No "ERROR"s, so what's the harm in trying to use it, right? When I try to
actually do anything that would release the eduPersonPrincipalName, the
IdP logs these messages:
2016-07-27 10:01:14,747 - WARN [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:141]
- Plugin 'eduPersonPrincipalName' was defined without a sourceAttributeID,
but attribute 'eppnFromUid', specified as a <Dependency> will be used.
2016-07-27 10:01:14,750 - ERROR [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:158]
- Attribute definition 'eduPersonPrincipalName' has a data connector
dependency 'myLDAP' but no sourceAttributeID.
I can get rid of most of the 'bad stuff' just by changing the end of
the first line of the eduPersonPrincipalName definition to include this:
sourceAttributeID="eduPersonPrincipalName"
Really??? Is that really the correct fix? That seems "too" easy! How
could that have possibly been left out of the example? Should I just edit
that example to include it?
However, even adding the sourceAttributeID info, and having a 'functional'
attribute, every time the eduPersonPrincipalName is released the IdP still
logs this message:
2016-07-27 10:15:27,593 - WARN [net.shibboleth.idp.attribute.resolver.PluginDependencySupport:144]
- Plugin 'eduPersonPrincipalName' was defined with a sourceAttributeID
'eduPersonPrincipalName', but the attribute definition
'eppnFromUid', specified as a <Dependency> will be used as well.
Sadly, I have not found a way to eliminate this unwanted warning. Can
anyone tell me how to get rid of this?
Thanks,
Max
More information about the users
mailing list