<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Thanks Scott. As often, it seems clear enough once you explain it!<div><br></div><div>To be explicit, deleting </div><div><span style="font-family: Monaco; font-size: 11px;"> </span><span style="color: rgb(44, 182, 195); font-family: Monaco; font-size: 11px; background-color: rgb(255, 250, 194);"><</span><span style="font-family: Monaco; font-size: 11px; color: rgb(208, 54, 207);">resolver</span><span style="font-family: Monaco; font-size: 11px; color: rgb(79, 45, 222);">:</span><span style="color: rgb(44, 182, 195); font-family: Monaco; font-size: 11px; background-color: rgb(255, 250, 194);">Dependency </span><span style="font-family: Monaco; font-size: 11px; color: rgb(44, 184, 32);">ref</span><span style="font-family: Monaco; font-size: 11px;">=</span><span style="font-family: Monaco; font-size: 11px; color: rgb(191, 52, 29);">"UASystemID"</span><span style="color: rgb(44, 182, 195); font-family: Monaco; font-size: 11px; background-color: rgb(255, 250, 194);"> /></span></div><div>as referring to a non-existing attribute definition, while</div><div>retaining the expression of LDAP attribute dependency by</div><div><span style="font-family: Monaco; font-size: 11px; color: rgb(44, 182, 195);"> </span><span style="color: rgb(44, 184, 32); font-family: Monaco; font-size: 11px; background-color: rgb(255, 250, 194);">sourceAttributeID</span><span style="font-family: Monaco; font-size: 11px;">=</span><span style="font-family: Monaco; font-size: 11px; color: rgb(191, 52, 29);">"UASystemID</span><font color="#bf341d" face="Monaco"><span style="font-size: 11px;">”</span></font> </div><div>removed the parse error and generated the desired result.</div><div><br></div><div>David Bantz</div><div>UAlaska IAM</div><div><br></div><div><div><div>On Fri, 29 Aug 2014, at 11:41 , Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On 8/29/14, 3:27 PM, "David Bantz" <<a href="mailto:dabantz@alaska.edu">dabantz@alaska.edu</a>> wrote:<br><blockquote type="cite"><br>UASystemID is used successfully in other attribute definitions, like:<br> <resolver:AttributeDefinition<br>id="uaUsername"xsi:type="Simple"xmlns="urn:mace:shibboleth:2.0:resolver:ad<br>"<br> sourceAttributeID="UASystemID"><br> <resolver:Dependency<br>ref="myLDAP" /> ...<br></blockquote><br>You're using it in the Dependency element, not just as a<br>sourceAttributeID. The constraint violated is referring to the Dependency<br>ref value, not the sourceAttributeID.<br><br>It's just catching the mistake before it happens at runtime, you specified<br>a dependency on a connector or attrbute definition called UASystemUD that<br>doesn't exist. That's probably a field from a data connector but not the<br>name of one.<br><br>-- Scott<br><br>-- <br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div></body></html>