PersistentNameIDGenerationConfiguration

[Joshua Brodie]

I have changed track -- and am getting error below now.

2017-07-18 23:54:32,829 - ERROR
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:404] - Profile
Action AddNameIDToSubjects: Error while generating NameID
org.opensaml.saml.common.SAMLException: Invalid
NameIdentifierGenerationService configuration
        at
net.shibboleth.idp.saml.nameid.impl.ProxySAML2NameIDGenerator.generate(ProxySAML2NameIDGenerator.java:62)

Any thoughts on where I may be messing up?

*SAML-NAMEID.XML*
<bean id="PersistentIdStore"
class="org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"
    p:driverClassName="oracle.jdbc.driver.OracleDriver"
    p:url="jdbc:oracle:thin:@iblag:1521:id1tst" p:username="bah"
p:password="blah"
    p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000"
p:testOnBorrow="true"
    p:testWhileIdle="true" p:testOnReturn="true"
p:timeBetweenEvictionRunsMillis="120000"
    p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1 from
dual" p:validationQueryTimeout="4" />

    <!-- A "store" bean suitable for use in the idp.persistentId.store
property. -->
    <bean id="MyPersistentIdStore" parent="shibboleth.JDBCPersistentIdStore"
    p:dataSource-ref="PersistentIdStore"
    p:queryTimeout="PT2S"
    p:retryableErrors="#{{'23000'}}" />

    <!-- SAML 2 NameID Generation -->
    <util:list id="shibboleth.SAML2NameIDGenerators">
        <ref bean="shibboleth.SAML2TransientGenerator" />
        <ref bean="shibboleth.SAML2PersistentGenerator" />
    </util:list>



*SAML-NAMEID.PROPERTIES*
idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator
idp.persistentId.dataSource = PersistentIdDataSource



*ATTRIBUTE-RESOLVER.XML*
<resolver:AttributeDefinition id="persistentNameIdSourceUid"
xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="uid">
              <resolver:Dependency ref="dir" />
        </resolver:AttributeDefinition>



*ATTRIBUTE-FILTER.XML*
    <AttributeFilterPolicy id="persistentNameIdSourceUid2All">
        <PolicyRequirementRule xsi:type="ANY" />

        <AttributeRule attributeID="persistentNameIdSourceUid">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>
    </AttributeFilterPolicy>


On 18 July 2017 at 19:41, Joshua Brodie <josbrodie at gmail.com> wrote:

> Long email -- includes extracts from saml-nameid.properties,
> saml-nameid.xml, and global.xml.
>
> I have googled the heck out of this -- and reread all the documentations
> -- I must be missing something.
>
> The 'uid' has been released to all in attribute-filter.xml.
>
> But nothing appears in the SHIBPID table after authentication -- and there
> does not seem to be any errors in the logs --- any tips on where to look?
>
>
> SAML-NAMEID.PROPERTIES
> idp.persistentId.sourceAttribute = employeeNumber
> idp.persistentId.salt =nadahere
> idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator
> idp.persistentId.dataSource = shibboleth.JPAStorageService.DataSource
>
>
>
> SAML-NAMEID.XML
> <!-- SAML 2 NameID Generation -->
>     <util:list id="shibboleth.SAML2NameIDGenerators">
>         <ref bean="shibboleth.SAML2TransientGenerator" />
>         <ref bean="shibboleth.SAML2PersistentGenerator" />
>     </util:list>
>
>
> GLOBAL.XML
>  <bean id="shibboleth.JPAStorageService.DataSource"
> class="org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"
>     p:driverClassName="oracle.jdbc.driver.OracleDriver"
>     p:url="jdbc:oracle:thin:@iOracle:1521:neem" p:username="IDP"
> p:password="ukelele"
>     p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000"
> p:testOnBorrow="true"
>     p:testWhileIdle="true" p:testOnReturn="true" p:
> timeBetweenEvictionRunsMillis="120000"
>     p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1
> from dual" p:validationQueryTimeout="4" />
>
>
>     <bean id="shibboleth.JPAStorageService" class="org.opensaml.storage.
> impl.JPAStorageService"
>       p:cleanupInterval="%{idp.storage.cleanupInterval:PT10M}"
>       c:factory-ref="shibboleth.JPAStorageService.entityManagerFactory"/>
>
>     <bean id="shibboleth.JPAStorageService.entityManagerFactory"
>           class="org.springframework.orm.jpa.
> LocalContainerEntityManagerFactoryBean">
>           <property name="packagesToScan" value="org.opensaml.storage.
> impl"/>
>           <property name="dataSource" ref="OracleDataSource"/>
>           <property name="jpaVendorAdapter" ref="shibboleth.
> JPAStorageService.JPAVendorAdapter"/>
>           <property name="jpaDialect">
>             <bean class="org.springframework.orm.jpa.vendor.HibernateJpaDialect"
> />
>           </property>
>     </bean>
>
>     <bean id="shibboleth.JPAStorageService.JPAVendorAdapter"
> class="org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">
>             <property name="database" value="ORACLE" />
>     </bean>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170719/e5ce7e9f/attachment-0001.html>