<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p>Tom,</p>
<p>Here is what I have in working environment, in my case, releasing UID for LDAP authentication. You may added or activate any additional attributes in attributes-fileter.xml, etc. x.y.z is hostname.</p>
<p><br>
</p>
<p><font color="#ff0000">In login.conf file:</font></p>
<p></p>
<div> <span style="font-size: 14pt;"> edu.vt.middleware.ldap.jaas.LdapLoginModule Sufficient</span></div>
<div> ldapUrl="ldaps://x.y.z:636"</div>
<div> baseDn="dc=x,dc=y,dc=z"</div>
<div> bindDn="cn=admin,dc=x,dc=y,dc=z"</div>
<div> bindCredential="password"</div>
<div> ssl="true"</div>
<div> userFilter="uid={0}";</div>
<div><br>
</div>
<div>
<div><font color="#ff0000">In attribute-filter.xml:</font></div>
<div> <span style="font-size: 14pt;"> <afp:AttributeFilterPolicy id="uid"></span>
<div> <afp:PolicyRequirementRule xsi:type="basic:ANY" /></div>
<div> <afp:AttributeRule attributeID="uid"></div>
<div> <afp:PermitValueRule xsi:type="basic:ANY"/></div>
<div> </afp:AttributeRule></div>
<div> </afp:AttributeFilterPolicy></div>
<div> </div>
<div><font color="#ff0000">In </font><span style="font-size: 14pt;"><font color="#ff0000">attribute-resolver.xml file:</font></span></div>
<div><span style="color: rgb(255, 0, 0); font-size: 14pt;"> </span><font color="#ff0000" style="font-size: 14pt;"> </font><span style="font-size: 14pt;"><resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="uid"></span></div>
<div>
<div> <resolver:Dependency ref="myLDAP" /></div>
<div> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" /></div>
<div> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" /></div>
<div style=""> </resolver:AttributeDefinition></div>
<div style=""><span style="font-size: 14pt;"> </span><br>
</div>
<div style="">
<div><font color="#ff0000"> </font><resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</div>
<div> xmlns="urn:mace:shibboleth:2.0:resolver:dc"</div>
<div> ldapURL="ldaps//x.y.z:389" </div>
<div> baseDN="dc=x,dc=y,dc=z" </div>
<div> principal="cn=admin,dc=x,dc=y,dc=z"</div>
<div> principalCredential="password"</div>
<div> <span style="font-size: 14pt;">lowercaseAttributeNames="true"></span></div>
<div> <dc:FilterTemplate></div>
<div> <![CDATA[</div>
<div> (uid=$requestContext.principalName)</div>
<div> ]]></div>
<div> </dc:FilterTemplate></div>
<div> <font color="#ff0000"><dc:ReturnAttributes>uid</dc:ReturnAttributes> /* releasing UID */ </font></div>
<div> <ConnectionPool minPoolSize="3"/></div>
<div style=""> </resolver:DataConnector></div>
<div style="color: rgb(255, 0, 0);"><br>
</div>
</div>
<font color="#ff0000"></font> <font color="#ff0000">In </font><span style="font-size: 14pt;"><font color="#ff0000">attribute-map.xml file of SP:</font></span>
<div><br>
</div>
<div><span style="font-size: 14pt;"> <Attribute name="urn:mace:dir:attribute-def:uid" id="uid"></span><br>
</div>
</div>
<div> OR</div>
<div> <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" /></div>
<div><br>
</div>
</div>
<div><br>
</div>
<br>
</div>
<br>
<p></p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of tom greenwood <tomgreenwood87@gmail.com><br>
<b>Sent:</b> Monday, January 25, 2016 8:03 AM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Attribute Releasing Question</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hi,
<div><br>
</div>
<div>I am a new shibboleth user. I read the documentation and i just want to make sure that I understand the process of attribute release configuration. What I get is this:</div>
<div><br>
</div>
<div>On the IDP:</div>
<div><br>
</div>
<div>1- we configure the attribute-resolver.xml to fetch the attributes</div>
<div>2- configure the attribute-filter.xml to filter these attributes according to a policy</div>
<div><br>
</div>
<div>On the SP:</div>
<div><br>
</div>
<div>1- we configure the attribute-map.xml to map these attributes to variables</div>
<div>2- configure the attribute-policy.xml to accept attributes from IDP</div>
<div><br>
</div>
<div>Is this broadly how it works? or is there any other configuration files that need to be configured as well in order to make this attribute-release process works?</div>
<div><br>
</div>
<div>Thanks a lot</div>
<div>Tom</div>
</div>
</div>
</div>
</div>
</body>
</html>