Hi All,<br><br>I am new to Shibboleth identity provider. I have installed and configured the Shibboleth identity provider by following the instructions given in shibboleth home page. I configured LDAP data connector to retrieve some attributes. And when i test the attribute resolver by using &quot;AACLI&quot; tool i am getting &quot;No attribute statement&quot; all the time. I did not find any logs related to attribute retrieval in the log files.<br>
<br>My configuration details as follows,<br><br><b>&quot;handler.xml&quot;</b><br><br>&lt;ph:LoginHandler xsi:type=&quot;ph:UsernamePassword&quot; <br>                  jaasConfigurationLocation=&quot;file://IDP_HOME/conf/login.config&quot;&gt;<br>
        &lt;ph:AuthenticationMethod&gt;urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport&lt;/ph:AuthenticationMethod&gt;<br>    &lt;/ph:LoginHandler&gt; <br><br><b>&quot;login.config&quot;</b><br><br>edu.vt.middleware.ldap.jaas.LdapLoginModule required<br>
      ldapUrl=&quot;LDAP_URL&quot;<br>      baseDn=&quot;ou=public,dc=abc,dc=com&quot;<br>      tls=&quot;true&quot;<br>      userFilter=&quot;uid={0}&quot;<br>   ;<br><br><b>&quot;attribute-filter.xml&quot;<br><br></b>&lt;afp:AttributeFilterPolicy&gt;<br>
        &lt;afp:PolicyRequirementRule xsi:type=&quot;basic:ANY&quot; /&gt;<br><br>        &lt;afp:AttributeRule attributeID=&quot;mail&quot;&gt;<br>            &lt;afp:PermitValueRule xsi:type=&quot;basic:ANY&quot; /&gt;<br>
        &lt;/afp:AttributeRule&gt;<br>    &lt;/afp:AttributeFilterPolicy&gt;<br><br><b>&quot;attribute-resolver.xml&quot;<br><br><br></b> &lt;resolver:AttributeDefinition xsi:type=&quot;ad:Simple&quot; id=&quot;mail&quot; sourceAttributeID=&quot;mail&quot;&gt;<br>
        &lt;resolver:Dependency ref=&quot;myLDAP&quot; /&gt;<br>    &lt;resolver:AttributeEncoder xsi:type=&quot;SAML2String&quot;<br>    xmlns=&quot;urn:mace:shibboleth:2.0:attribute:encoder&quot;<br>            name=&quot;urn:oid:0.9.2342.19200300.100.1.1&quot; friendlyName=&quot;mail&quot; /&gt; <br>
    &lt;/resolver:AttributeDefinition&gt;<br><br>&lt;resolver:DataConnector id=&quot;myLDAP&quot; xsi:type=&quot;dc:LDAPDirectory&quot;<br>        ldapURL=&quot;LDAP_URL&quot; <br>        baseDN=&quot;ou=public,dc=abc,dc=com&quot; <br>
        principal=&quot;USER_NAME&quot;<br>        principalCredential=&quot;PASSWORD&quot;&gt;<br>        &lt;dc:FilterTemplate&gt;<br>            &lt;![CDATA[<br>                (uid=$requestContext.principalName)<br>            ]]&gt;<br>
        &lt;/dc:FilterTemplate&gt;<br>    &lt;/resolver:DataConnector&gt;<b><br><br><br><br></b>Even when i comment the statements in &quot;login.config&quot; file, i am not getting any errors in the log file and still getting &quot;No Aattribute Statement&quot; message. Following is the command i am using from &quot;IDP_HOME&quot;<b><br>
<br>aacli.bat --configDir=../conf --principal=&lt;USER_NAME&gt;<br><br></b>Could anyone please help me get this working? Am i missing something in the configruation? <br><br>Thank you in advance.<br><br>-- Pavan<br>