Attribute value reset when used a dataconnector?

Fri Jun 1 21:16:37 EDT 2018

Oh, I think I understand what you said now Scott. I need a
FailoverConnector, Thanks!

On Fri, Jun 1, 2018 at 9:06 PM Mohamed Lrhazi <lrhazi at cua.edu> wrote:

> and by commenting out the following from my config, I can login as
> expected to the SP, which requires the employeeID to be released.
>
> <AttributeDefinition id="isMember" xsi:type="Mapped" sourceAttributeID="eduPersonAffiliation">
>     <Dependency ref="sqliteConnector"/>
>     <DefaultValue>false</DefaultValue>
>     <ValueMap>
>         <ReturnValue>true</ReturnValue>
>         <SourceValue>member</SourceValue>
>     </ValueMap>
> </AttributeDefinition>
> <AttributeDefinition id="isLawMember" xsi:type="Mapped" sourceAttributeID="eduPersonScopedAffiliation">
>     <Dependency ref="sqliteConnector"/>
>     <DefaultValue>false</DefaultValue>
>     <ValueMap>
>         <ReturnValue>true</ReturnValue>
>         <SourceValue partialMatch="true" ignoreCase="true">law_</SourceValue>
>     </ValueMap>
> </AttributeDefinition>
>
> ...
>
> <DataConnector id="sqliteConnector" xsi:type="RelationalDatabase" readOnlyConnection="false">
>     <ApplicationManagedConnection
>         jdbcDriver="org.sqlite.JDBC" jdbcURL="jdbc:sqlite:/data/cua-eduPerson.db" poolAcquireRetryAttempts="1"/>
>     <Dependency ref="employeeID" />
>     <QueryTemplate>
>         <![CDATA[
>         select * from accounts where employeeID='$employeeID.get(0)';
>         ]]>
>     </QueryTemplate>
>     <Column columnName="eduPersonAffiliation" attributeID="eduPersonAffiliation" />
>     <Column columnName="eduPersonPrimaryAffiliation" attributeID="eduPersonPrimaryAffiliation" />
>     <Column columnName="eduPersonScopedAffiliation" attributeID="eduPersonScopedAffiliation" />
> </DataConnector>
>
>
>
> On Fri, Jun 1, 2018 at 8:57 PM Mohamed Lrhazi <lrhazi at cua.edu> wrote:
>
>> turns out the issue is still there, I was testing the prod instances
>> instead of the test env...
>>
>> so, I do see in the log that the employeeID got a value from the ldap
>> connector, but later, in the log, after the sql connector, it seems to say
>> that there are no attributes to release... but it is supposed to release
>> employeeID.
>>
>> 2018-06-01T20:39:16.190790-04:00 idp-prod-1.cua 6d8855831853[1243]:  2018-06-01 20:39:16,186 - lv=DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:139] js=1pn4zbp6ic4tzixy8n91w9sab c=10.2.0.215 -  Data Connector 'adLdapConnector': produced the following 6 attributes during resolution [employeeID, memberOf, sn, cn, mail, entryDN]
>>
>> 2018-06-01T20:39:16.190790-04:00 idp-prod-1.cua 6d8855831853[1243]:  2018-06-01 20:39:16,186 - lv=DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:143] js=1pn4zbp6ic4tzixy8n91w9sab c=10.2.0.215 -  Data Connector 'adLdapConnector': Attribute 'employeeID': Values '[StringAttributeValue{value=1600000}]'
>>
>>
>> ...
>>
>> 2018-06-01T20:39:16.206280-04:00 idp-prod-1.cua 6d8855831853[1243]:  2018-06-01 20:39:16,204 - lv=DEBUG [net.shibboleth.idp.attribute.resolver.dc.rdbms.impl.TemplatedExecutableStatementBuilder:169] js=1pn4zbp6ic4tzixy8n91w9sab c=10.2.0.215 -  Template text select * from accounts where employeeID='$employeeID.get(0)'; yields select * from accounts where employeeID='1600000';
>>
>> 2018-06-01T20:39:16.224584-04:00 idp-prod-1.cua 6d8855831853[1243]:  Jun 01, 2018 8:39:16 PM com.mchange.v2.c3p0.impl.AbstractPoolBackedDataSource getPoolManager
>>
>> 2018-06-01T20:39:16.224675-04:00 idp-prod-1.cua 6d8855831853[1243]:  INFO: Initializing c3p0 pool... com.mchange.v2.c3p0.ComboPooledDataSource [ acquireIncrement -> 3, acquireRetryAttempts -> 1, acquireRetryDelay -> 5000, autoCommitOnClose -> false, automaticTestTable -> null, breakAfterAcquireFailure -> true, checkoutTimeout -> 0, connectionCustomizerClassName -> null, connectionTesterClassName -> com.mchange.v2.c3p0.impl.DefaultConnectionTester, dataSourceName -> 1bqq1hf9v1goyvf81wkagy7|67bd351e, debugUnreturnedConnectionStackTraces -> false, description -> null, driverClass -> org.sqlite.JDBC, factoryClassLocation -> null, forceIgnoreUnresolvedTransactions -> false, identityToken -> 1bqq1hf9v1goyvf81wkagy7|67bd351e, idleConnectionTestPeriod -> 180, initialPoolSize -> 3, jdbcUrl -> jdbc:sqlite:/data/cua-eduPerson.db, maxAdministrativeTaskTime -> 0, maxConnectionAge -> 0, maxIdleTime -> 600, maxIdleTimeExcessConnections -> 0, maxPoolSize -> 50, maxStatements -> 0, maxStatementsPerConnection -> 0, minPoolSize -> 2, numHelperThreads -> 3, preferredTestQuery -> null, properties -> {}, propertyCycle -> 0, statementCacheNumDeferredCloseThreads -> 0, testConnectionOnCheckin -> false, testConnectionOnCheckout -> false, unreturnedConnectionTimeout -> 0, userOverrides -> {}, usesTraditionalReflectiveProxies -> false ]
>>
>> 2018-06-01T20:39:16.251131-04:00 idp-prod-1.cua 6d8855831853[1243]:  2018-06-01 20:39:16,249 - lv=ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:299] js=1pn4zbp6ic4tzixy8n91w9sab c=10.2.0.215 -  Profile Action ResolveAttributes: Error resolving attributes
>>
>> 2018-06-01T20:39:16.251131-04:00 idp-prod-1.cua 6d8855831853[1243]:  net.shibboleth.idp.attribute.resolver.ResolutionException: Data Connector 'sqliteConnector': Unable to execute SQL query
>>
>> 2018-06-01T20:39:16.251131-04:00 idp-prod-1.cua 6d8855831853[1243]:  #011at net.shibboleth.idp.attribute.resolver.dc.rdbms.impl.RDBMSDataConnector.retrieveAttributes(RDBMSDataConnector.java:173)
>>
>> 2018-06-01T20:39:16.251131-04:00 idp-prod-1.cua 6d8855831853[1243]:  Caused by: org.sqlite.SQLiteException: [SQLITE_ERROR] SQL error or missing database (no such table: accounts)
>>
>> 2018-06-01T20:39:16.251131-04:00 idp-prod-1.cua 6d8855831853[1243]:  #011at org.sqlite.core.DB.newSQLException(DB.java:909)
>>
>> 2018-06-01T20:39:16.264150-04:00 idp-prod-1.cua 6d8855831853[1243]:  2018-06-01 20:39:16,262 - lv=DEBUG [net.shibboleth.idp.profile.impl.FilterAttributes:270] js=1pn4zbp6ic4tzixy8n91w9sab c=10.2.0.215 -  Profile Action FilterAttributes: No attribute context, no attributes to filter
>>
>> ...
>>
>>
>> On Fri, Jun 1, 2018 at 8:20 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>>> > Thanks a lot. I broke a rule of debugging and made multiple changes at
>>> once...
>>> > now I cannot reproduce the "No attributes available" issue...
>>>
>>> I would expect if you put the database offline and try it, you should
>>> get that result, per my last note.
>>>
>>> -- Scott
>>>
>>> --
>>> For Consortium Member technical support, see
>>> https://wiki.shibboleth.net/confluence/x/coFAAg
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>> --
>> Thanks,
>> Mohamed.
>>
>
>
> --
> Thanks,
> Mohamed.
>

-- 
Thanks,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180601/a60a54e5/attachment.html>