<div class="gmail_quote"><div class="gmail_quote"><span></span>I have upgraded "Identity Provider" from version 2.2.1 to 2.3.4, in our attribute resolver we have some attribute in ldap and some attribute in rdbms oracle.<br>
After upgrade, the "Identity Provider" doesn't resolve the attributes on rdbms, without apparently error, it resolves only uid attribute on ldap.<br>
<br>Below the attribute-resolver.xml that works with previous configuration.<br><br><?xml version="1.0" encoding="UTF-8"?><br><br><resolver:AttributeResolver xmlns:resolver="urn:mace:shibboleth:2.0:resolver"<br>
xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>" xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc"<br> xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad" xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc"<br>
xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder" xmlns:sec="urn:mace:shibboleth:2.0:security"<br> xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd<br>
urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd<br> urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd<br>
urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd<br> urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd<br>
urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd"><br><br><br> <resolver:AttributeDefinition xsi:type="Simple" id="CodiceUtente" sourceAttributeID="CODPIN" xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br>
<resolver:Dependency ref="regute" /><br> <resolver:Dependency ref="regsoc" /><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="CodiceUtente" friendlyName="CodiceUtente" /><br>
</resolver:AttributeDefinition><br>....<br>Some attribute<br>....<br><br> <resolver:AttributeDefinition id="uid" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"<br>
sourceAttributeID="uid"><br> <resolver:Dependency ref="myLDAP" /><br><br> <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br>
name="urn:mace:dir:attribute-def:uid" /><br><br> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br> name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" /><br>
</resolver:AttributeDefinition><br> <!-- ========================================== --><br> <!-- Data Connectors --><br> <!-- ========================================== --><br>
<br> <resolver:DataConnector id="regute" xsi:type="dc:RelationalDatabase" queryTimeout="PT10.000S"><br> <dc:ContainerManagedConnection resourceName="java:comp/env/jdbc/ORAIDP" /><br>
<dc:QueryTemplate><br> <![CDATA[<br> select 'ENTPEN9934' codent,<br> a.codpin codpin,<br> a.mat mat,<br> 'Cittadino' ruo,<br>
b.codfis codfis,<br> decode (a.indemlpec, null, a.indeml, a.indemlpec) indeml,<br> get_profile (a.codpin) profilo,<br> cogprf,<br>
nomprf,<br> sexprf,<br> titstuprf,<br> doptitstu,<br> isc_giorno (b.mat, sysdate) flgisc,<br> fu_pen (b.mat) flgpen,<br>
decode (fu_contadnp (b.mat, 1) + fu_contadnp (b.mat, 1), 0, 0, 1) flgdicoms,<br> isc_anno (b.mat, fu_ac_web()) flgiscdic,<br> fu_anz_cassa (b.mat, sysdate, 1) annanz,<br>
fu_anz_cassa (b.mat, sysdate, 2) gganz,<br> fu_eta (sysdate, datnas) anneta,<br> del,<br> fu_ra(b.mat,fu_ac_web()) flgdicirp,<br>
fu_vaa(b.mat,fu_ac_web()) flgdiciva<br> from i_regute a, b_anacas b<br> where b.mat(+) = a.mat and codpin = '$requestContext.principalName'<br>
]]><br> </dc:QueryTemplate><br><br> </resolver:DataConnector><br><br> <resolver:DataConnector id="regsoc" xsi:type="dc:RelationalDatabase" queryTimeout="PT10.000S"><br>
<dc:ContainerManagedConnection resourceName="java:comp/env/jdbc/ORAIDP" /><br> <dc:QueryTemplate><br> <![CDATA[<br> select CODPIN ,CODSOC MAT, DECODE(INDPECRPL,NULL,INDEMLRPL,INDPECRPL) INDEML, GET_PROFILE(CODPIN) PROFILO FROM I_REGSOC WHERE CODPIN='$requestContext.principalName'<br>
]]><br> </dc:QueryTemplate><br><br> </resolver:DataConnector><br><br> <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver:dc"<br>
ldapURL="ldap://<a href="http://xxx.inarcassa.it" target="_blank">xxx.inarcassa.it</a> ldap://<a href="http://xxx.inarcassa.it" target="_blank">xxx.inarcassa.it</a>" baseDN="ou=Users,dc=inarcassa,dc=it" principal="cn=Manager,dc=<br>
inarcassa,dc=it"<br> principalCredential="xxxxxx"><br> <FilterTemplate><br> <![CDATA[<br> (uid=$requestContext.principalName)<br> ]]><br> </FilterTemplate><br>
</resolver:DataConnector><br><br> <!-- ========================================== --><br> <!-- Principal Connectors --><br> <!-- ========================================== --><br>
<resolver:PrincipalConnector xsi:type="pc:Transient" id="shibTransient" nameIDFormat="urn:mace:shibboleth:1.0:nameIdentifier" /><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="saml1Unspec" nameIDFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /><br>
<resolver:PrincipalConnector xsi:type="pc:Transient" id="saml2Transient" nameIDFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /><br><br></resolver:AttributeResolver><br>
<br> <!-- ========================================== --><br> <!-- Principal Connectors --><br> <!-- ========================================== --><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="shibTransient" nameIDFormat="urn:mace:shibboleth:1.0:nameIdentifier" /><br>
<resolver:PrincipalConnector xsi:type="pc:Transient" id="saml1Unspec" nameIDFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /><br> <resolver:PrincipalConnector xsi:type="pc:Transient" id="saml2Transient" nameIDFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /><br>
<br></resolver:AttributeResolver><br><br>I can't attach log otherwise the moderator cuts my message.<br><br><br>Where's the mistake?<br><br>Thanks<span class="HOEnZb"><font color="#888888"><span><font color="#888888"><br>
<br>Daniele<br></font></span></font></span></div>
</div><br>