Error in the idp-process.log
ls Lidz
lslidzgeneve at gmail.com
Thu Jul 20 17:10:00 EDT 2017
Thanks all....appreciated.
Here is the odd thing -- rebooting, without changing config files, still
works for all -- including PersistentID -- & the error message still occurs
on a scheduled basis.
Quite stumped......is there something not right in config below?
*saml-nameid.xml*
<!-- SAML 2 NameID Generation -->
<util:list id="shibboleth.SAML2NameIDGenerators">
<ref bean="shibboleth.SAML2TransientGenerator" />
<ref bean="shibboleth.SAML2PersistentGenerator" />
</util:list>
<!-- SAML 1 NameIdentifier Generation -->
<util:list id="shibboleth.SAML1NameIdentifierGenerators">
<ref bean="shibboleth.SAML1TransientGenerator" />
</util:list>
*saml-nameid.properties*
idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator
idp.persistentId.dataSource = shibboleth.PostgreSQLDataSource
idp.persistentId.sourceAttribute = uid
idp.persistentId.salt = mary had a little lamb
*attribute-resolver.xml*
<!-- Targeted ID/Persistent ID -->
<resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type=
"ad:SAML2NameID" sourceAttributeID="persistentID"
nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
<resolver:Dependency ref="StoreID" />
<resolver:DisplayName xml:lang="en">Targeted ID</
resolver:DisplayName>
<resolver:DisplayName xml:lang="de">Targeted ID</
resolver:DisplayName>
<resolver:DisplayName xml:lang="fr">Targeted ID</
resolver:DisplayName>
<resolver:DisplayName xml:lang="it">Targeted ID</
resolver:DisplayName>
<resolver:DisplayDescription xml:lang="en">Targeted ID: A unique
identifier for a person, different for each service provider.</
resolver:DisplayDescription>
<resolver:DisplayDescription xml:lang="de">Targeted ID: Eindeutige
Benützeridentifikation, unterschiedlich pro Service Provider.</
resolver:DisplayDescription>
<resolver:DisplayDescription xml:lang="fr">Targeted ID: Un
identifiant unique de l'utilisateur, différent pour chaque fournisseur de
service.</resolver:DisplayDescription>
<resolver:DisplayDescription xml:lang="it">Targeted ID:
identificativo unico della persona, differente per ogni fornitore di
servizio.</resolver:DisplayDescription>
<resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name=
"urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
<resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name=
"urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
</resolver:AttributeDefinition>
<resolver:DataConnector id="StoreID" xsi:type="dc:StoredId"
generatedAttributeID="persistentID" sourceAttributeID=
"%{idp.persistentId.sourceAttribute}" salt="%{idp.persistentId.salt}"
queryTimeout="0">
<resolver:Dependency ref="%{idp.persistentId.sourceAttribute}" />
<dc:BeanManagedConnection>RDBMSDataSource</dc:BeanManagedConnection>
</resolver:DataConnector>
*Global.xml*
<!-- Oracle Spring connection pooling data source configuration -->
<bean id="RDBMSDataSource" class=
"org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"
p:driverClassName="oracle.jdbc.driver.OracleDriver"
p:url="jdbc:oracle:thin:@000:1521:000" p:username="FOO" p:password="BAR"
p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000"
p:testOnBorrow="true"
p:testWhileIdle="true" p:testOnReturn="true"
p:timeBetweenEvictionRunsMillis="120000"
p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1 from
dual" p:validationQueryTimeout="4" />
<bean id="shibboleth.JPAStorageService" class=
"org.opensaml.storage.impl.JPAStorageService"
p:cleanupInterval="%{idp.storage.cleanupInterval:PT10M}"
c:factory-ref="shibboleth.JPAStorageService.entityManagerFactory"/>
<bean id="shibboleth.JPAStorageService.entityManagerFactory"
class=
"org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean">
<property name="packagesToScan" value="org.opensaml.storage.impl"/>
<property name="dataSource" ref="RDBMSDataSource"/>
<property name="jpaVendorAdapter" ref=
"shibboleth.JPAStorageService.JPAVendorAdapter"/>
<property name="jpaDialect">
<bean class="org.springframework.orm.jpa.vendor.HibernateJpaDialect"
/>
</property>
</bean>
<bean id="shibboleth.JPAStorageService.JPAVendorAdapter" class=
"org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">
<property name="database" value="ORACLE" />
</bean>
On Thu, Jul 20, 2017 at 6:57 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> > Would anyone know what could be the trigger for message below?
>
> You don't have all the relevant properties for persistentID generation set
> appropriately, basically.
>
> > It's not tied directly to a user action - Persistent IDs are generated
> and stored
> > as expected.
>
> Then the properties were set and working, then changed to a non-working
> state, and the next time you reboot, you're dead in the water. So roll back
> whatever you changed I guess.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170720/489c39b4/attachment-0001.html>
More information about the users
mailing list