LDAP Integration Error

[Selin R]

I got following error while integrate LDAP with Shibboleth:


*net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'myLDAP': Invocation of init method failed; nested exception
is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Data Connector 'myLDAP': Invalid connector configuration
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.metrics.RegisterMetricSets$child#0' defined in
file [/opt/shibboleth-idp/system/conf/../../conf/admin/metrics.xml]: Cannot
resolve reference to bean 'shibboleth.metrics.AttributeResolverGaugeSet'
while setting bean property 'arguments' with key [7]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.metrics.AttributeResolverGaugeSet' defined in
file [/opt/shibboleth-idp/system/conf/general-admin-system.xml]: Invocation
of init method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Injected service was null or not an AttributeResolver *




































*attribute-resolver.xml<?xml version="1.0" encoding="UTF-8"?>
<AttributeResolver         xmlns="urn:mace:shibboleth:2.0:resolver"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
<http://www.w3.org/2001/XMLSchema-instance%22>
xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver
http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd">
<http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd%22%3E><?xml
version="1.0" encoding="UTF-8"?> <AttributeResolver
xmlns="urn:mace:shibboleth:2.0:resolver"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
<http://www.w3.org/2001/XMLSchema-instance%22>
xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver
http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd">
<http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd%22%3E>
      <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Prescoped"
sourceAttributeID="eduPersonPrincipalName">        <Dependency ref="myLDAP"
/>        <AttributeEncoder xsi:type="SAML1ScopedString"
name="urn:mace:dir:attribute-def:eduPersonPrincipalName" encodeType="false"
/>        <AttributeEncoder xsi:type="SAML2ScopedString"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
friendlyName="eduPersonPrincipalName" encodeType="false" />
</AttributeDefinition>    <AttributeDefinition id="uid" xsi:type="Simple"
sourceAttributeID="uid">        <Dependency ref="myLDAP" />
<AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:uid" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid"
encodeType="false" />    </AttributeDefinition>    <AttributeDefinition
id="mail" xsi:type="Simple" sourceAttributeID="mail">        <Dependency
ref="myLDAP" />        <AttributeEncoder xsi:type="SAML1String"
name="urn:mace:dir:attribute-def:mail" encodeType="false" />
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail"
encodeType="false" />    </AttributeDefinition>    <DataConnector
id="myLDAP" xsi:type="LDAPDirectory"
ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
principal="%{idp.attribute.resolver.LDAP.bindDN}"
principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
  useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:false}"
connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"
responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}">
<FilterTemplate>            *

<![CDATA[
                %{idp.attribute.resolver.LDAP.searchFilter}
            ]]>


        </FilterTemplate>
        <ConnectionPool
            minPoolSize="%{idp.pool.LDAP.minSize:0}"
            maxPoolSize="%{idp.pool.LDAP.maxSize:10}"
            blockWaitTime="%{idp.pool.LDAP.blockWaitTime:PT3S}"

validatePeriodically="%{idp.pool.LDAP.validatePeriodically:true}"
            validateTimerPeriod="%{idp.pool.LDAP.validatePeriod:PT3S}"
            expirationTime="%{idp.pool.LDAP.idleTime:PT10M}"
            failFastInitialize="%{idp.pool.LDAP.failFastInitialize:false}"
/>
    </DataConnector>
</AttributeResolver>

*ldap.properties*
idp.authn.LDAP.authenticator                   = anonSearchAuthenticator
idp.authn.LDAP.ldapURL                          = ldap://localhost:389

idp.authn.LDAP.useStartTLS                     = false
idp.authn.LDAP.useSSL                          = false


idp.authn.LDAP.returnAttributes                 =
passwordExpirationTime,loginGraceRemaining


idp.authn.LDAP.baseDN                           = ou=Staff,dc=##,dc=#,dc=#
#idp.authn.LDAP.subtreeSearch                   = false
idp.authn.LDAP.userFilter                       = (uid={user})
# for AD: idp.authn.LDAP.bindDN=adminuser at domain.com
idp.authn.LDAP.bindDN                           = uid=#,ou=Staff
idp.authn.LDAP.bindDNCredential                 = #

idp.authn.LDAP.dnFormat                         =
cn=%s,ou=Staff,dc=#,dc=#,dc=#
idp.attribute.resolver.LDAP.returnAttributes    = uid,mail

idp.attribute.resolver.LDAP.ldapURL             = %{idp.authn.LDAP.ldapURL}
idp.attribute.resolver.LDAP.baseDN              =
%{idp.authn.LDAP.baseDN:undefined}
idp.attribute.resolver.LDAP.bindDN              =
%{idp.authn.LDAP.bindDN:undefined}
idp.attribute.resolver.LDAP.bindDNCredential    =
%{idp.authn.LDAP.bindDNCredential:undefined}
idp.attribute.resolver.LDAP.useStartTLS         =
%{idp.authn.LDAP.useStartTLS:false}
idp.attribute.resolver.LDAP.searchFilter        =
(uid=$requestContext.principal)
idp.attribute.resolver.LDAP.responseTimeout   = 30000
idp.attribute.resolver.LDAP.connectTimeout   = 30000
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170916/790dc8f5/attachment.html>