UK Federation members - attribute filter line for PolicyRequirementRule needed

Peter Schober peter.schober at univie.ac.at
Mon Mar 28 19:45:20 UTC 2022


* Cantor, Scott via users <users at shibboleth.net> [2022-03-28 17:32]:
> On 3/28/22, 11:29 AM, "users on behalf of Dave Perry" <users-bounces at shibboleth.net on behalf of Dave.Perry at hull-college.ac.uk> wrote:
> 
> >    Rod I tried that before. If dropping saml: is the only change I make, I get the following error when trying to
> > log in to anything: 2022-03-28 16:23:40,579 - 10.30.4.20 - ERROR 
> 
> The cause of that is in the log long before that point in very
> explicit terms. Namely you have the default namespace bound to a
> prefix but not as the default namespace of the document.

@Dave: Just look at the new attribute filter (e.g. in
dist/conf/attribute-filter.xml), particularly the first XML element
and its XML attributes.

As per The Fine Documentation Rod pointed you at the element
'RegistrationAuthority' is in the 'urn:mace:shibboleth:2.0:afp'
namespace and a default attribute-filter.xml should make that the
default namespace (by not establishing a namespace prefix like it does
for others, e.g. 'xsi'):

  <AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
          xmlns="urn:mace:shibboleth:2.0:afp"

HTH,
-peter


More information about the users mailing list