I am trying to set up Dropbox in our IdP (v2.4.5) and every time i start up tomcat, I get the below errors so IdP does not finish starting up. What causes this? 20:21:16.617 - DEBUG [edu.internet2.middleware.shibboleth.common.config.security.Shibbol

[bleb1982]

Thanks Peter - The subject line/message was a copy past error. I had actually
created a different thread which if you looked down a little it would show
up. I thought I had deleted this one but then it looks like it got moved
over to this thread by Scott.

I know that DropBox is part of InCommon but is a separate Entity ID, so I
don't think that would have anything to do with it.


#1 - added in /opt/shibboleth-idp/conf/relying-party.xml:
—

    <rp:RelyingParty id="Dropbox"
                provider="https://idp.company.net/idp/shibboleth"
                defaultSigningCredentialRef="IdPCredential">
                <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
encryptAssertions="never" encryptNameIds="never" />
    </rp:RelyingParty>

    <MetadataProvider xsi:type="FilesystemMetadataProvider"
xmlns="urn:mace:shibboleth:2.0:metadata"
                id="DropboxMetadata"
               
metadataFile="/opt/shibboleth-idp/metadata/dropbox-metadata.xml">
    </metadata:MetadataProvider>



#2 - added in /opt/shibboleth-idp/conf/attribute-filter.xml
—

    <afp:AttributeFilterPolicy>
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString"
value="Dropbox" />

        <afp:AttributeRule attributeID="email">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="givenName">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="mail_nameID">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="surname">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="uid">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

    </afp:AttributeFilterPolicy>

#3 - added in /opt/shibboleth-idp/conf/attribute-resolver.xml
—

<resolver:AttributeDefinition xsi:type="ad:Simple" id="mail_nameID"
sourceAttributeID="mail">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
        nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
/>
</resolver:AttributeDefinition>

and the metadata:
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
entityID="Dropbox">
	<md:SPSSODescriptor
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
signResponses="always">
	
<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
		<md:AssertionConsumerService isDefault="true"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://www.dropbox.com/saml_login" index="0" />
	</md:SPSSODescriptor>
</md:EntityDescriptor>




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/RE-I-am-trying-to-set-up-Dropbox-in-our-IdP-v2-4-5-and-every-time-i-start-up-tomcat-I-get-the-below-l-tp7623591p7623609.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.