Some Template AttributeDefinition does not work on 3.4.2
Takeshi NISHIMURA
takeshi at nii.ac.jp
Thu Dec 27 05:45:18 EST 2018
I have a setting of Template AttributeDefinition below that did work before but does not work on 3.4.2.
{code:xml|title=attribute-resolver.xml}
<!-- Definition of scopedPersonalUniqueCode (Template Attribute) -->
<AttributeDefinition xsi:type="Scoped" id="scopedPersonalUniqueCode" scope="%{idp.scope}" sourceAttributeID="templatePersonalUniqueCode">
<Dependency ref="templatePersonalUniqueCode" />
<AttributeEncoder xsi:type="SAML2ScopedString" name="urn:example.org:1.2.3.4" friendlyName="scopedPersonalUniqueCode" encodeType="false" />
</AttributeDefinition>
<AttributeDefinition xsi:type="Template" id="templatePersonalUniqueCode">
<Dependency ref="myLDAP" />
<Template>
<![CDATA[
facultyorstaff:${employeeNumber}
]]>
</Template>
<SourceAttribute>employeeNumber</SourceAttribute>
</AttributeDefinition>
{code}
The followings are logs provided by Shibboleth IdP 3.4.2.
{noformat:title=idp-warn.log (on startup)}
2018-12-27 17:51:42,712 - - WARN [net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition:227] - Attribute Definition 'templatePersonalUniqueCode': Source Attribute employeeNumber is not provided as a dependency
{noformat}
...I think this log is OK because we are using old 'Dependency' notation.
{noformat:title=idp-warn.log (on authentication)}
2018-12-27 18:00:17,717 - 157.1.72.98 - ERROR [net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition:330] - Attribute Definition 'templatePersonalUniqueCode': Attribute Definition 'templatePersonalUniqueCode': All source attributes used in TemplateAttributeDefinition must have the same number of values: 'objectClass'
2018-12-27 18:00:17,721 - 157.1.72.98 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:314] - Profile Action ResolveAttributes: Error resolving attributes
net.shibboleth.idp.attribute.resolver.ResolutionException: Attribute Definition 'templatePersonalUniqueCode': All source attributes used in TemplateAttributeDefinition must have the same number of values: 'objectClass'
at net.shibboleth.idp.attribute.resolver.ad.impl.TemplateAttributeDefinition.setupSourceValues(TemplateAttributeDefinition.java:331)
2018-12-27 18:00:18,493 - 157.1.72.98 - WARN [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:155] - Profile Action PopulateAttributeReleaseContext: Unable to locate attribute context
{noformat}
Any suggestions or comments are welcomed.
Best regards,
Takeshi
More information about the users
mailing list