PersistentNameIDGenerationConfiguration
Joshua Brodie
josbrodie at gmail.com
Tue Jul 18 22:41:44 EDT 2017
Long email -- includes extracts from saml-nameid.properties,
saml-nameid.xml, and global.xml.
I have googled the heck out of this -- and reread all the documentations --
I must be missing something.
The 'uid' has been released to all in attribute-filter.xml.
But nothing appears in the SHIBPID table after authentication -- and there
does not seem to be any errors in the logs --- any tips on where to look?
SAML-NAMEID.PROPERTIES
idp.persistentId.sourceAttribute = employeeNumber
idp.persistentId.salt =nadahere
idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator
idp.persistentId.dataSource = shibboleth.JPAStorageService.DataSource
SAML-NAMEID.XML
<!-- SAML 2 NameID Generation -->
<util:list id="shibboleth.SAML2NameIDGenerators">
<ref bean="shibboleth.SAML2TransientGenerator" />
<ref bean="shibboleth.SAML2PersistentGenerator" />
</util:list>
GLOBAL.XML
<bean id="shibboleth.JPAStorageService.DataSource"
class="org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"
p:driverClassName="oracle.jdbc.driver.OracleDriver"
p:url="jdbc:oracle:thin:@iOracle:1521:neem" p:username="IDP"
p:password="ukelele"
p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000"
p:testOnBorrow="true"
p:testWhileIdle="true" p:testOnReturn="true"
p:timeBetweenEvictionRunsMillis="120000"
p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1 from
dual" p:validationQueryTimeout="4" />
<bean id="shibboleth.JPAStorageService"
class="org.opensaml.storage.impl.JPAStorageService"
p:cleanupInterval="%{idp.storage.cleanupInterval:PT10M}"
c:factory-ref="shibboleth.JPAStorageService.entityManagerFactory"/>
<bean id="shibboleth.JPAStorageService.entityManagerFactory"
class="org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean">
<property name="packagesToScan"
value="org.opensaml.storage.impl"/>
<property name="dataSource" ref="OracleDataSource"/>
<property name="jpaVendorAdapter"
ref="shibboleth.JPAStorageService.JPAVendorAdapter"/>
<property name="jpaDialect">
<bean
class="org.springframework.orm.jpa.vendor.HibernateJpaDialect" />
</property>
</bean>
<bean id="shibboleth.JPAStorageService.JPAVendorAdapter"
class="org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">
<property name="database" value="ORACLE" />
</bean>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170718/1288182a/attachment.html>
More information about the users
mailing list