Unable to get attribute value.

[Nate Klingenstein]

Tomomi,

Your problem is that the username you're using to login doesn't match any usernames in LDAP.  As a result, there are no attributes retrieved.

Without attributes retrieved, there's nothing to release.

Here are pieces from your log to show that. 
 
> INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
> - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
> 'osabe at addd.daaan.work' succeeded

> DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:138] - Profile
> Action FinalizeAuthentication: Canonical principal name was established as
> 'osabe at addd.daaan.work'

> DEBUG
> [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:212]
> - Template text (uid=$resolutionContext.principal) yields
> (uid=osabe at addd.daaan.work)

> DEBUG
> [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.StringAttributeValueMappingStrategy:60]
> - Results did not contain any entries, nothing to map

> DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:136] -
> myLDAP no attributes were produced during resolution

> DEBUG [net.shibboleth.idp.attribute.resolver.AbstractResolverPlugin:195] -
> Resolver plugin 'myLDAP' produced no value.

> DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:419]
> - Attribute Resolver 'ShibbolethAttributeResolver': Data connector 'myLDAP'
> produced no attributes

> DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:461]
> - Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving
> dependencies for 'Email'

> DEBUG
> [net.shibboleth.idp.attribute.resolver.AbstractAttributeDefinition:262] -
> Attribute Definition 'Email': produced an attribute with no values

> DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:339]
> - Attribute Resolver 'ShibbolethAttributeResolver': Attribute definition
> 'Email' produced an attribute with 0 values

You need to get the LDAP search filter right for your directory setup.  It can be configured in ldap.properties.  It might be as simple as changing the attribute you're searching for.  Or, you might need to modify the entered username in some way.  It all depends on your local setup.

Take care,
Nate.