DEPRECATED:125 - Java class method 'requestContext.getPrincipalName()'

[Mohamed Lrhazi]

Looks like changing that to this fixed it. Thanks!

 <FilterTemplate>
            <![CDATA[
                (cn=$resolutionContext.getPrincipal())
            ]]>
        </FilterTemplate>




On Fri, Jun 26, 2020 at 3:20 PM Mohamed Lrhazi <lrhazi at cua.edu> wrote:

> Oh, I have this in my "attribute-resolver.xml"  :
>
>  <DataConnector id="adLdapConnector" xsi:type="LDAPDirectory"
>         ldapURL="ldaps://ldaps.cua.edu:636"
>         baseDN="OU=Users ############ "
>         principal="CN=SAML-IDP-############"
>         principalCredential="############"
>         trustFile="%{idp.authn.LDAP.trustCertificates}">
>         <FilterTemplate>
>             <![CDATA[
>                 (cn=$requestContext.principalName)
>             ]]>
>         </FilterTemplate>
>             <ReturnAttributes>cn mail sn givenName employeeID memberOf
> department</ReturnAttributes>
>     </DataConnector>
>
>
> Do I need to replace:  (cn=$requestContext.principalName)
>
>
>
>
> On Fri, Jun 26, 2020 at 3:15 PM Mohamed Lrhazi <lrhazi at cua.edu> wrote:
>
>> :) Exactly.... why would I have to :)
>>
>> so, how do I fix my config, so I don't have a DEPRECATION warning ?
>>
>>
>>
>> On Fri, Jun 26, 2020 at 3:10 PM Mak, Steve <makst at upenn.edu> wrote:
>>
>>> Why are you editing system files?
>>>
>>>
>>>
>>> *From: *users <users-bounces at shibboleth.net> on behalf of Mohamed
>>> Lrhazi <lrhazi at cua.edu>
>>> *Reply-To: *Shib Users <users at shibboleth.net>
>>> *Date: *Friday, June 26, 2020 at 15:07
>>> *To: *Shib Users <users at shibboleth.net>
>>> *Subject: *Re: DEPRECATED:125 - Java class method
>>> 'requestContext.getPrincipalName()'
>>>
>>>
>>>
>>> Thanks Mark.
>>>
>>>
>>>
>>> How would you fix this:
>>>
>>>
>>>
>>> idp-dr-1 :: idp-server-current/system/flows » grep -A3 -B1
>>> getPrincipalName ./authn/authn-flow.xml
>>>     <decision-state id="CheckSubjectCanonicalization">
>>>         <if
>>> test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.SubjectCanonicalizationContext)).getPrincipalName()
>>> == null"
>>>             then="PopulateSubjectCanonicalizationContext"
>>>             else="DetectIdentitySwitch" />
>>>     </decision-state>
>>> idp-dr-1 :: idp-server-current/system/flows »
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> On Fri, Jun 26, 2020 at 2:55 PM Mak, Steve <makst at upenn.edu> wrote:
>>>
>>> It says how to fix it in the log line.
>>>
>>>
>>>
>>> *From: *users <users-bounces at shibboleth.net> on behalf of Mohamed
>>> Lrhazi <lrhazi at cua.edu>
>>> *Reply-To: *Shib Users <users at shibboleth.net>
>>> *Date: *Friday, June 26, 2020 at 14:26
>>> *To: *Shib Users <users at shibboleth.net>
>>> *Subject: *Re: DEPRECATED:125 - Java class method
>>> 'requestContext.getPrincipalName()'
>>>
>>>
>>>
>>> This is version 3.4.6
>>>
>>>
>>>
>>> On Fri, Jun 26, 2020 at 2:19 PM Mohamed Lrhazi <lrhazi at cua.edu> wrote:
>>>
>>> Hello,
>>>
>>>
>>>
>>> How do I find out what to change in my config, to fix this warning?
>>>
>>>
>>>
>>> :  shib-idp;idp-process.log;dev;nothing;2020-06-26 13:56:22,015 -
>>> 136.242.2.242/87CD3FC963447CD94E6E0084138FE301 - WARN [DEPRECATED:125]
>>> - Java class method 'requestContext.getPrincipalName()': This will be
>>> removed in the next major version of this software; replacement is
>>> resolutionContext.getPrincipal()
>>> :  shib-idp;idp-warn.log;dev;nothing;2020-06-26 13:56:22,015 -
>>> 136.242.2.242 - WARN [DEPRECATED:125] - Java class method
>>> 'requestContext.getPrincipalName()': This will be removed in the next major
>>> version of this software; replacement is resolutionContext.getPrincipal()
>>> :  shib-idp;idp-process.log;dev;nothing;2020-06-26 13:56:22,029 -
>>> 136.242.2.242/87CD3FC963447CD94E6E0084138FE301 - DEBUG
>>> [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:212]
>>> - Template text (cn=$requestContext.principalName) yields (cn=lrhazi)
>>> :  shib-idp;idp-process.log;dev;nothing;2020-06-26 13:56:22,053 -
>>> 136.242.2.242/87CD3FC963447CD94E6E0084138FE301 - DEBUG
>>> [org.ldaptive.ssl.AggregateTrustManager:151] - checkServerTrusted for
>>> sun.security.ssl.X509TrustManagerImpl at 2e882141 succeeded
>>>
>>>
>>>
>>>
>>>
>>> grepping for files containing  getPrincipalName :
>>>
>>>
>>>
>>> [root at b99afe915f32 shibboleth-idp]# grep -lr getPrincipalName .
>>> ./system/flows/authn/authn-flow.xml
>>> ./system/flows/authn/initial-authn-flow.xml
>>> ./system/flows/intercept/impersonate-flow.xml
>>> ./old-20200626-1524/system/flows/authn/authn-flow.xml
>>> ./old-20200626-1524/system/flows/authn/initial-authn-flow.xml
>>> ./old-20200626-1524/system/flows/intercept/impersonate-flow.xml
>>> [root at b99afe915f32 shibboleth-idp]#
>>>
>>>
>>>
>>> These files should have been upgraded automatically by the installer? Do
>>> I need to manually update them? and where do I find the updated versions?
>>>
>>>
>>>
>>> Thank you!
>>>
>>> Mohamed.
>>>
>>> --
>>> For Consortium Member technical support, see
>>> https://wiki.shibboleth.net/confluence/x/coFAAg
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>> --
>>> For Consortium Member technical support, see
>>> https://wiki.shibboleth.net/confluence/x/coFAAg
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200626/56ccc09c/attachment.htm>