Some Template AttributeDefinition does not work on 3.4.2

Takeshi NISHIMURA takeshi at nii.ac.jp
Thu Dec 27 05:45:18 EST 2018


I have a setting of Template AttributeDefinition below that did work before but does not work on 3.4.2.

{code:xml|title=attribute-resolver.xml}
   <!-- Definition of scopedPersonalUniqueCode (Template Attribute) -->
   <AttributeDefinition xsi:type="Scoped" id="scopedPersonalUniqueCode" scope="%{idp.scope}" sourceAttributeID="templatePersonalUniqueCode">
       <Dependency ref="templatePersonalUniqueCode" />
       <AttributeEncoder xsi:type="SAML2ScopedString" name="urn:example.org:1.2.3.4" friendlyName="scopedPersonalUniqueCode" encodeType="false" />
   </AttributeDefinition>

   <AttributeDefinition xsi:type="Template" id="templatePersonalUniqueCode">
       <Dependency ref="myLDAP" />
       <Template>
           <![CDATA[
               facultyorstaff:${employeeNumber}
           ]]>
       </Template>
       <SourceAttribute>employeeNumber</SourceAttribute>
   </AttributeDefinition>
{code}

The followings are logs provided by Shibboleth IdP 3.4.2. 

{noformat:title=idp-warn.log (on startup)}
2018-12-27 17:51:42,712 -  - WARN [net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition:227] - Attribute Definition 'templatePersonalUniqueCode': Source Attribute employeeNumber is not provided as a dependency
{noformat}

...I think this log is OK because we are using old 'Dependency' notation.

{noformat:title=idp-warn.log (on authentication)}
2018-12-27 18:00:17,717 - 157.1.72.98 - ERROR [net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition:330] - Attribute Definition 'templatePersonalUniqueCode': Attribute Definition 'templatePersonalUniqueCode': All source attributes used in TemplateAttributeDefinition must have the same number of values: 'objectClass'
2018-12-27 18:00:17,721 - 157.1.72.98 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:314] - Profile Action ResolveAttributes: Error resolving attributes
net.shibboleth.idp.attribute.resolver.ResolutionException: Attribute Definition 'templatePersonalUniqueCode': All source attributes used in TemplateAttributeDefinition must have the same number of values: 'objectClass'
       at net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition.setupSourceValues(TemplateAttributeDefinition.java:331)
2018-12-27 18:00:18,493 - 157.1.72.98 - WARN [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:155] - Profile Action PopulateAttributeReleaseContext: Unable to locate attribute context
{noformat}

Any suggestions or comments are welcomed.

Best regards,
Takeshi



More information about the users mailing list