<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Would anyone care to share details of a working ebsco or proquest configuration?</div>
<div><br>
</div>
I've run into a dead end configuring attribute resolution and release for ebsco. We had it working briefly in April, but had to pull it out when it broke our google release[1]. Now, I'm trying to put it back in and not getting anywhere. I'm getting ebsco's
"Error 103" message, without much indication what's wrong. i'm not getting a lot of help out of ebsco right now. I've been told that they only have tools to debug UK Shibboleth users.
<div><br>
</div>
<div>
<div>We're releasing eduPersonScopedAffiliation and eduPersonEntitlement, as you can see here:</div>
<div>
<div> <afp:AttributeFilterPolicy id="ebscohost"></div>
<div> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="<a href="http://shibboleth.ebscohost.com">http://shibboleth.ebscohost.com</a>" /></div>
<div> <afp:AttributeRule attributeID="eduPersonEntitlement"></div>
<div> <afp:PermitValueRule xsi:type="basic:AttributeValueString" value="urn:mace:dir:entitlement:common-lib-terms" /></div>
<div> </afp:AttributeRule></div>
<div> <!--</div>
<div> <afp:AttributeRule attributeID="eduPersonEntitlement"></div>
<div> <afp:PermitValueRule xsi:type="basic:ANY" /></div>
<div> </afp:AttributeRule></div>
<div> --></div>
<div> <afp:AttributeRule attributeID="eduPersonScopedAffiliation"></div>
<div> <afp:PermitValueRule xsi:type="basic:ANY" /></div>
<div> </afp:AttributeRule></div>
<div> </afp:AttributeFilterPolicy></div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Since we don't yet have directory information to resolve from, I've tried eduPersonEntitlement two ways:</div>
<div><br>
</div>
<div>First, as an AttributeValueString in attribute-filter.xml:</div>
<div><afp:PermitValueRule xsi:type="basic:AttributeValueString" value="urn:mace:dir:entitlement:common-lib-terms" /></div>
<div><br>
</div>
<div>Second, as a static data connector in attribute-resolver.xml:</div>
<div>
<div> <resolver:DataConnector id="staticAttributes" xsi:type="dc:Static"></div>
<div> <dc:Attribute id="eduPersonEntitlement"></div>
<div> <dc:Value>urn:mace:dir:entitlement:common-lib-terms</dc:Value></div>
<div> </dc:Attribute></div>
<div> </resolver:DataConnector></div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>eduPersonScopedAffiliation is resolved from the object classes attached to the LDAP entry for the user account, via a script in attribute-resolver.xml:</div>
<div>
<div> <resolver:AttributeDefinition xsi:type="Script" xmlns="urn:mace:shibboleth:2.0:resolver:ad"</div>
<div> id="eduPersonAffiliation" sourceAttributeID="eduPersonAffiliation"></div>
<div> <resolver:Dependency ref="uarkLDAP" /></div>
<div> <resolver:AttributeEncoder xsi:type="enc:SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</div>
<div> name="urn:mace:dir:attribute-def:eduPersonAffiliation" /></div>
<div> <resolver:AttributeEncoder xsi:type="enc:SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</div>
<div> name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" friendlyName="eduPersonAffiliation" /></div>
<div><br>
</div>
<div> <!-- The script, wrapped in a CDATA section so that special XML characters don't need to be removed --></div>
<div> <Script><![CDATA[</div>
<div> importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);</div>
<div><br>
</div>
<div> // Create attribute to be returned from definition</div>
<div> eduPersonAffiliation = new BasicAttribute("eduPersonAffiliation");</div>
<div><br>
</div>
<div> // Add at least one value</div>
<div> eduPersonAffiliation.getValues().add("affiliate");</div>
<div> </div>
<div> // If the user has group membership</div>
<div> if (typeof objectClass != "undefined" && objectClass != null ){</div>
<div> // The go through each objectClass value and add the appropriate affiliation</div>
<div> // The IdP will remove duplicate values so we don't need to worry about that here</div>
<div> for ( i = 0; objectClass != null && i < objectClass.getValues().size(); i++ ){</div>
<div> value = objectClass.getValues().get(i);</div>
<div><br>
</div>
<div> if (value.indexOf("uaoFaculty") > -1){</div>
<div> eduPersonAffiliation.getValues().add("member");</div>
<div> eduPersonAffiliation.getValues().add("employee");</div>
<div> eduPersonAffiliation.getValues().add("staff");</div>
<div> eduPersonAffiliation.getValues().add("faculty");</div>
<div> }</div>
<div> if (value.indexOf("uoaStaff") > -1){</div>
<div> eduPersonAffiliation.getValues().add("member");</div>
<div> eduPersonAffiliation.getValues().add("employee");</div>
<div> eduPersonAffiliation.getValues().add("staff");</div>
<div> }</div>
<div> if (value.indexOf("uoaStudent") > -1){</div>
<div> eduPersonAffiliation.getValues().add("member");</div>
<div> eduPersonAffiliation.getValues().add("student");</div>
<div> }</div>
<div> if (value.indexOf("uoaApplicant") > -1){</div>
<div> eduPersonAffiliation.getValues().add("member");</div>
<div> }</div>
<div> //uoaRetired and uoaAffiliate only get the affiliate designation that all get</div>
<div> }</div>
<div> }</div>
<div> </resolver:AttributeDefinition></div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>[1] Really, it was the poorly documented "don't release transientID to google" that broke, but we were really green then.</div>
</div>
<div>
<div>
<div id="signature-separator" style="line-height:5px; color: #888;">-- </div>
<div id="sig" style="margin: 6px 0; padding: 8px; border-top: 1px #000 dotted; font: 11px/13px 'Century Gothic', Arial, Sans-Serif; color:#be0f34;">
<img src="http://goo.gl/2ZYiQ" alt="me" width="37" height="37" border="0" moz-do-not-send="true" style="float:left; padding: 2px 6px 0 0;">
<div id="line1" style="font-family: 'Sorts Mill Goudy'; font-style: normal; font-weight: 400; src: local('Sorts Mill Goudy Regular'), local('SortsMillGoudy-Regular'), url('http://themes.googleusercontent.com/static/fonts/sortsmillgoudy/v2/JzRrPKdwEnE8F1TDmDLMUhxcROG_7vu2ubkyRjqgeRY.ttf') format('truetype');">
<span style="color: black; font-weight:bold;">Don Faulkner, CISSP</span> | <span>
<a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted;" href="http://its.uark.edu/">IT Security</a> at the
<a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted; font-variant:small-caps;" href="http://www.uark.edu/">
University of Arkansas</a></span></div>
<div id="line2"><span style="font-family: Monaco, 'Lucida Sans Typewriter', monospace; font-family: 'Ubuntu Mono'; font-style: normal; font-weight: normal; src: local('Ubuntu Mono'), local('UbuntuMono-Regular'), url('http://themes.googleusercontent.com/static/fonts/ubuntumono/v2/ViZhet7Ak-LRXZMXzuAfkZ0EAVxt0G0biEntp43Qt6E.ttf') format('truetype'); color: black;">contact>>
</span><span style=""><a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted;" href="mailto:donf@uark.edu">donf@uark.edu</a>
| +1 (479) 575-2905</span></div>
<div id="line3"><span style="font-family: Monaco, 'Lucida Sans Typewriter', monospace; font-family: 'Ubuntu Mono'; font-style: normal; font-weight: normal; src: local('Ubuntu Mono'), local('UbuntuMono-Regular'), url('http://themes.googleusercontent.com/static/fonts/ubuntumono/v2/ViZhet7Ak-LRXZMXzuAfkZ0EAVxt0G0biEntp43Qt6E.ttf') format('truetype'); color: black;">connect>>
</span><span style=""><a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted;" href="http://www.facebook.com/uarkITS">uarkITS
on Facebook</a> | <a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted;" href="http://twitter.com/uaits">
@uaits</a> | <a onmouseover="this.style.borderBottom = '1px solid #be0f34'" onmouseout="this.style.borderBottom = '1px dotted #be0f34'" style="color:#be0f34; text-decoration: none; border-bottom: 1px #be0f34 dotted;" href="http://twitter.com/dfaulkner">
@dfaulkner</a> </span></div>
</div>
</div>
<br>
</div>
</div>
</body>
</html>