Service 'shibboleth.AttributeRegistryService': Initial load failed
Matt Swann
mswann090 at gmail.com
Tue Dec 6 16:23:37 UTC 2022
Hey Everyone,
So I think I'm finally nearing the end of this setup. I've worked through
all of the errors in the IdP logs.
I have one last set I'm scratching my head on. Here are the attributes I'm
using. I'd like to have shibboleth query the Username and group membership
from AD. I pasted that below then under that are the logs.
<AttributeResolver
xmlns="urn:mace:shibboleth:2.0:resolver"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver
http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd">
<!-- ========================================== -->
<!-- Attribute Definitions -->
<!-- ========================================== -->
<AttributeDefinition id="principalName" xsi:type="Scoped" scope="i*.*.mil">
<InputDataConnector ref="myLDAP" attributeNames="sAMAccountName"/>
<AttributeEncoder xsi:type="SAML2String"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos" />
</AttributeDefinition>
<AttributeDefinition id="isMemberOfRecursive" xsi:type="Simple">
<InputDataConnector ref="ADGroup" attributeNames="cn"/>
<AttributeEncoder xsi:type="SAML2String" name="urn:oid:31 A1 BB BE 05 3C A5
43" friendlyName="isMemberOf" />
</AttributeDefinition>
<!-- ========================================== -->
<!-- Data Connectors -->
<!-- ========================================== -->
<DataConnector id="myLDAP" xsi:type="LDAPDirectory"
ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
principal="%{idp.attribute.resolver.LDAP.bindDN}"
principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"
connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"
trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}"
responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}">
<FilterTemplate>
<![CDATA[
%{idp.attribute.resolver.LDAP.searchFilter}
]]>
</FilterTemplate>
<ConnectionPool
minPoolSize="%{idp.pool.LDAP.minSize:3}"
maxPoolSize="%{idp.pool.LDAP.maxSize:10}"
blockWaitTime="%{idp.pool.LDAP.blockWaitTime:PT3S}"
validatePeriodically="%{idp.pool.LDAP.validatePeriodically:true}"
validateTimerPeriod="%{idp.pool.LDAP.validatePeriod:PT5M}"
expirationTime="%{idp.pool.LDAP.idleTime:PT10M}"
failFastInitialize="%{idp.pool.LDAP.failFastInitialize:false}"
/>
</DataConnector>
</AttributeResolver>
Below are the logs I'm receiving. These are the only errors I've
received but I'm unsure where the "name" attribute should be placed.
ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:182]
- Service 'shibboleth.AttributeRegistryService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanDefinitionStoreException: Missing
'name' attribute, cannot create transcoder rule
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)
Caused by: org.springframework.beans.factory.BeanDefinitionStoreException:
Missing 'name' attribute, cannot create transcoder rule
at
net.shibboleth.idp.attribute.resolver.spring.enc.BaseSAML2AttributeEncoderParser.doParse(BaseSAML2AttributeEncoderParser.java:46)
2022-12-06 07:46:49,978 - - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:185]
- Service 'shibboleth.AttributeRegistryService': No further attempts will
be made to reload
2022-12-06 07:46:49,994 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:173]
- Service 'shibboleth.MetadataResolverService': Performing initial load
2022-12-06 07:46:49,994 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:259]
- Service 'shibboleth.MetadataResolverService': Reloading service
configuration
2022-12-06 07:46:49,994 - - INFO
[net.shibboleth.ext.spring.util.ApplicationContextBuilder:346] - Skipping
non-existent resource: ServletContext resource [/C:/Program Files
(x86)/Shibboleth/IdP/system/conf/metadata-providers-system.xml]
2022-12-06 07:46:50,244 - - ERROR
[net.shibboleth.idp.saml.metadata.impl.AttributeMappingNodeProcessor:112] -
Attribute transcoding service unavailable
2022-12-06 07:46:50,244 - - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591]
- Metadata Resolver FilesystemMetadataResolver LocalMetadata: New metadata
successfully loaded for 'C:\Program Files
(x86)\Shibboleth\IdP\metadata\SPMetadata.xml'
2022-12-06 07:46:50,244 - - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396]
- Metadata Resolver FilesystemMetadataResolver LocalMetadata: Next refresh
cycle for metadata provider 'C:\Program Files
(x86)\Shibboleth\IdP\metadata\SPMetadata.xml' will occur on
'2022-12-06T18:46:50.186484700Z'
('2022-12-06T10:46:50.186484700-08:00[America/Los_Angeles]' local time)
2022-12-06 07:46:50,260 - - INFO
[net.shibboleth.idp.profile.spring.relyingparty.metadata.MetadataProviderContainer:96]
- Top level Metadata Provider 'ShibbolethMetadata' did not have a sort key;
giving it value '1'
2022-12-06 07:46:50,260 - - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service
'shibboleth.MetadataResolverService': Completed reload and swapped in
latest configuration for service 'shibboleth.MetadataResolverService'
2022-12-06 07:46:50,260 - - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service
'shibboleth.MetadataResolverService': Reload complete
2022-12-06 07:46:50,400 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:173]
- Service 'shibboleth.AttributeFilterService': Performing initial load
2022-12-06 07:46:50,400 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:259]
- Service 'shibboleth.AttributeFilterService': Reloading service
configuration
2022-12-06 07:46:50,572 - - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service
'shibboleth.AttributeFilterService': Completed reload and swapped in latest
configuration for service 'shibboleth.AttributeFilterService'
2022-12-06 07:46:50,572 - - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service
'shibboleth.AttributeFilterService': Reload complete
2022-12-06 07:46:50,572 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:200]
- Service 'shibboleth.AttributeFilterService': Reload interval set to:
PT15M, starting refresh thread
2022-12-06 07:46:50,588 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:173]
- Service 'shibboleth.AttributeResolverService': Performing initial load
2022-12-06 07:46:50,588 - - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:259]
- Service 'shibboleth.AttributeResolverService': Reloading service
configuration
2022-12-06 07:46:50,603 - - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:182]
- Service 'shibboleth.AttributeResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanDefinitionStoreException: Missing
'name' attribute, cannot create transcoder rule
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)
Caused by: org.springframework.beans.factory.BeanDefinitionStoreException:
Missing 'name' attribute, cannot create transcoder rule
at
net.shibboleth.idp.attribute.resolver.spring.enc.BaseSAML2AttributeEncoderParser.doParse(BaseSAML2AttributeEncoderParser.java:46)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20221206/291baf0d/attachment.htm>
More information about the users
mailing list