Error in the idp-process.log

ls Lidz lslidzgeneve at gmail.com
Thu Jul 20 17:10:00 EDT 2017


Thanks all....appreciated.

Here is the odd thing -- rebooting, without changing config files, still
works for all -- including PersistentID -- & the error message still occurs
on a scheduled basis.

Quite stumped......is there something not right in config below?

*saml-nameid.xml*

   <!-- SAML 2 NameID Generation -->

    <util:list id="shibboleth.SAML2NameIDGenerators">

        <ref bean="shibboleth.SAML2TransientGenerator" />

        <ref bean="shibboleth.SAML2PersistentGenerator" />

    </util:list>


    <!-- SAML 1 NameIdentifier Generation -->

    <util:list id="shibboleth.SAML1NameIdentifierGenerators">

        <ref bean="shibboleth.SAML1TransientGenerator" />
    </util:list>

*saml-nameid.properties*

idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator

idp.persistentId.dataSource = shibboleth.PostgreSQLDataSource

idp.persistentId.sourceAttribute = uid
idp.persistentId.salt = mary had a little lamb

*attribute-resolver.xml*

       <!-- Targeted ID/Persistent ID -->

    <resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type=
"ad:SAML2NameID" sourceAttributeID="persistentID"

        nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">

        <resolver:Dependency ref="StoreID" />

        <resolver:DisplayName xml:lang="en">Targeted ID</
resolver:DisplayName>

        <resolver:DisplayName xml:lang="de">Targeted ID</
resolver:DisplayName>

        <resolver:DisplayName xml:lang="fr">Targeted ID</
resolver:DisplayName>

        <resolver:DisplayName xml:lang="it">Targeted ID</
resolver:DisplayName>

        <resolver:DisplayDescription xml:lang="en">Targeted ID: A unique
identifier for a person, different for each service provider.</
resolver:DisplayDescription>

        <resolver:DisplayDescription xml:lang="de">Targeted ID: Eindeutige
Benützeridentifikation, unterschiedlich pro Service Provider.</
resolver:DisplayDescription>

        <resolver:DisplayDescription xml:lang="fr">Targeted ID: Un
identifiant unique de l'utilisateur, différent pour chaque fournisseur de
service.</resolver:DisplayDescription>

        <resolver:DisplayDescription xml:lang="it">Targeted ID:
identificativo unico della persona, differente per ogni fornitore di
servizio.</resolver:DisplayDescription>

        <resolver:AttributeEncoder xsi:type="enc:SAML1XMLObject" name=
"urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />

        <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject" name=
"urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />

    </resolver:AttributeDefinition>



    <resolver:DataConnector id="StoreID" xsi:type="dc:StoredId"
generatedAttributeID="persistentID" sourceAttributeID=
"%{idp.persistentId.sourceAttribute}" salt="%{idp.persistentId.salt}"
queryTimeout="0">

<resolver:Dependency ref="%{idp.persistentId.sourceAttribute}" />

<dc:BeanManagedConnection>RDBMSDataSource</dc:BeanManagedConnection>

</resolver:DataConnector>


*Global.xml*


  <!-- Oracle Spring connection pooling data source configuration -->

  <bean id="RDBMSDataSource" class=
"org.apache.commons.dbcp2.BasicDataSource" destroy-method="close"

    p:driverClassName="oracle.jdbc.driver.OracleDriver"

    p:url="jdbc:oracle:thin:@000:1521:000" p:username="FOO" p:password="BAR"

    p:initialSize="5" p:maxTotal="50" p:maxIdle="5" p:maxWaitMillis="2000"
p:testOnBorrow="true"

    p:testWhileIdle="true" p:testOnReturn="true"
p:timeBetweenEvictionRunsMillis="120000"

    p:minEvictableIdleTimeMillis="120000" p:validationQuery="select 1 from
dual" p:validationQueryTimeout="4" />





    <bean id="shibboleth.JPAStorageService" class=
"org.opensaml.storage.impl.JPAStorageService"

      p:cleanupInterval="%{idp.storage.cleanupInterval:PT10M}"

      c:factory-ref="shibboleth.JPAStorageService.entityManagerFactory"/>


<bean id="shibboleth.JPAStorageService.entityManagerFactory"

      class=
"org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean">

      <property name="packagesToScan" value="org.opensaml.storage.impl"/>

      <property name="dataSource" ref="RDBMSDataSource"/>

      <property name="jpaVendorAdapter" ref=
"shibboleth.JPAStorageService.JPAVendorAdapter"/>

      <property name="jpaDialect">

        <bean class="org.springframework.orm.jpa.vendor.HibernateJpaDialect"
/>

      </property>

</bean>

<bean id="shibboleth.JPAStorageService.JPAVendorAdapter" class=
"org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">

        <property name="database" value="ORACLE" />

</bean>




On Thu, Jul 20, 2017 at 6:57 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Would anyone know what could be the trigger for message below?
>
> You don't have all the relevant properties for persistentID generation set
> appropriately, basically.
>
> > It's not tied directly to a user action - Persistent IDs are generated
> and stored
> > as expected.
>
> Then the properties were set and working, then changed to a non-working
> state, and the next time you reboot, you're dead in the water. So roll back
> whatever you changed I guess.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170720/489c39b4/attachment-0001.html>


More information about the users mailing list