issue in releasing attributes

[Aisha Al Fudhaili]

I've solved this issue. Now I'm facing this debug


does not contain entity attribute with the name http://shibboleth.net/ns/attributes/releaseAllValues and the format urn:oasis:names:tc:SAML:2.0:attrname-format:uri

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Aisha Al Fudhaili
Sent: Wednesday, June 23, 2021 12:37 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: issue in releasing attributes

ERROR [net.shibboleth.idp.profile.impl.FilterAttributes:362] - Profile Action FilterAttributes: Error encountered while filtering attributes : Invalid Attribute Filter configuration
2021-06-23 12:27:31,250 - 185.186.207.49 - WARN [net.shibboleth.idp.profile.impl.FilterAttributes:365] - Filter error masked, clearing resolved attributes  

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Tuesday, June 22, 2021 3:51 PM
To: users at shibboleth.net
Subject: Re: issue in releasing attributes

* Aisha Al Fudhaili <aisha at omren.om> [2021-06-22 12:26]:
> Can any one help me on this. Im using shibboleth idp 3.4 in windows 
> server

Then you should make plans for an upgrade to IDP v4.

> 2021-06-22 14:15:18,346 - 185.186.207.49 - ERROR 
> [net.shibboleth.idp.profile.impl.FilterAttributes:362] - Profile 
> Action FilterAttributes: Error encountered while filtering attributes
> : Invalid Attribute Filter configuration

You have to PolicyRequirementRules in your config:

>         <PolicyRequirementRule xsi:type="Requester" 
> value="https://mirsal.omren.om" /> <PolicyRequirementRule 
> xsi:type="ANY" />

It makes no sense to combine ANY with anything else but for your information it's possible to combine multiple requirements, just not in that way. (The documenation should have examples.) Just drop the line with ANY  and that should be fixed.

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net