<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
ok. That’s the problem in our AD when using uid in <font face="Menlo"><span style="font-size: 11px;">FilterTemplate. But I can’t figure out why I got runtime exception when using cn in FilterTemplate.</span></font>
<div><br>
</div>
<div>Thanks, Hong<br>
<div>
<div>On Jan 16, 2015, at 12:20 PM, hy93 <<a href="mailto:hy93@cornell.edu">hy93@cornell.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Thanks Scott. Another problem:</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Now the data connector to AD doesn’t work. If cn is used in FilterTemplate, I got runtime exception when ran aacli.sh. If I replaced cn with UID, I didn’t see any error in the log, but I didn’t
get requested data back.</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">2015-01-16 11:48:41,260 - ERROR [net.shibboleth.idp.profile:-2] - Uncaught runtime exception</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Attribute value cannot be null or empty</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"> at net.shibboleth.utilities.java.support.logic.Constraint.isNotNull(Constraint.java:210)</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Attribute-resolver.xml</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">
<div style="margin: 0px;"> <resolver:AttributeDefinition id="mail" xmlns="urn:mace:shibboleth:2.0:resolver:ad"</div>
<div style="margin: 0px;"> xsi:type="Simple"</div>
<div style="margin: 0px;"> sourceAttributeID="mail"></div>
<div style="margin: 0px; min-height: 13px;"><br>
</div>
<div style="margin: 0px;"> <resolver:Dependency ref="myAD" /></div>
<div style="margin: 0px;"> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</div>
<div style="margin: 0px;"> name="urn:oid:0.9.2342.19200300.100.1.3"</div>
<div style="margin: 0px;"> friendlyName="mail" /></div>
<div style="margin: 0px; min-height: 13px;"><br>
</div>
<div style="margin: 0px;"> </resolver:AttributeDefinition></div>
<div style="margin: 0px;"><br>
</div>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">
<div style="margin: 0px;"> <resolver:DataConnector id="myAD" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver:dc"</div>
<div style="margin: 0px;"> ldapURL="<a href="ldap://query.ad.cornell.edu:3268">ldap://query.ad.cornell.edu:3268</a>"</div>
<div style="margin: 0px; min-height: 13px;"><br>
</div>
<div style="margin: 0px;"> baseDN="DC=cornell,DC=edu"</div>
<div style="margin: 0px;"> principal=“xxxxx"</div>
<div style="margin: 0px;"> principalCredential=“xxx" ></div>
<div style="margin: 0px;"> <FilterTemplate></div>
<div style="margin: 0px;"> <![CDATA[</div>
<div style="margin: 0px;"> (cn=$requestContext.principalName)</div>
<div style="margin: 0px;"> ]]></div>
<div style="margin: 0px;"> </FilterTemplate></div>
<div style="margin: 0px;"> <LDAPProperty name="java.naming.referral" value="follow"/></div>
<div style="margin: 0px;"> </resolver:DataConnector></div>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Thanks,</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Hong</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div>
<div>On Jan 14, 2015, at 2:25 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">On 1/14/15, 7:12 PM, "Hong Ye" <<a href="mailto:hy93@cornell.edu">hy93@cornell.edu</a>> wrote:<br>
<br>
<br>
<blockquote type="cite"><br>
I also see this warning in the log. The warning was generated when I <br>
restarted Tomcat. I don’t understand what it mean.<br>
</blockquote>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJava1.8">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJava1.8</a><br>
<br>
Has nothing to do with the IdP version.<br>
<br>
-- Scott<br>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></blockquote>
</div>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>