<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I think you're stilling missing a namespace decl up top for the
default namespace. Like this, assuming that's the right namespace
URI: <br>
<br>
xmlns="urn:mace:shibboleth:2.0:afp"<br>
<br>
This is still namespace-qualified XML, with schema validation, so
any used namespace prefixes, including the default one, need to be
declared.<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 2/10/16 3:44 PM, O'Dowd, Josh wrote:<br>
</div>
<blockquote
cite="mid:6C4BCDAB7291C340B9D5C096C70C6C2565451525@UMMAIL02.gs.umt.edu"
type="cite">
<pre wrap="">I hear you on the xml editor. I use the latest version of eclipse's xml editor.
I shortened the xml a bit more for this post:
<?xml version="1.0" encoding="UTF-8"?>
<AttributeFilterPolicyGroup xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:schemaLocation="urn:mace:shibboleth:2.0:afp <a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-afp.xsd">http://shibboleth.net/schema/idp/shibboleth-afp.xsd</a>"
id="ShibbolethFilterPolicy">
<!-- Release the transient ID to anyone -->
<AttributeFilterPolicy id="releaseTransientIdToAnyone">
<PolicyRequirementRule xsi:type="ANY"/>
<AttributeRule attributeID="transientId">
<PermitValueRule xsi:type="ANY"/>
</AttributeRule>
</AttributeFilterPolicy>
<AttributeFilterPolicy id="releaseToAnyone">
<PolicyRequirementRule xsi:type="ANY" />
<AttributeRule attributeID="uid"><PermitValueRule xsi:type="ANY" /></AttributeRule>
</AttributeFilterPolicy>
</AttributeFilterPolicyGroup>
Idp restart. Log is showing the following error, which is really puzzling me since the AttributeFilterPolicyGroup element is definitely declared in the xsd:
2016-02-10 13:40:10,357 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.AttributeFilterS
ervice': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML
document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 5; co
lumnNumber: 30; cvc-elt.1: Cannot find the declaration of element 'AttributeFilterPolicyGroup'.
-Josh
-----Original Message-----
From: users [<a class="moz-txt-link-freetext" href="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</a>] On Behalf Of Cantor, Scott
Sent: Wednesday, February 10, 2016 12:35 PM
To: Shib Users <a class="moz-txt-link-rfc2396E" href="mailto:users@shibboleth.net"><users@shibboleth.net></a>
Subject: RE: IdPv3.2.1 Attribute-filter.xml stuck!
</pre>
<blockquote type="cite">
<pre wrap="">I am also seeing this error:
cvc-elt.4.2: Cannot resolve 'ANY' to a type definition for element
'<a class="moz-txt-link-freetext" href="afp:PolicyRequirementRule">afp:PolicyRequirementRule</a>'.
</pre>
</blockquote>
<pre wrap="">
That doesn't match the XML you posted (no afp: prefix in what you posted). Your issues are just XML and namespace correctness, so I suggest you try an XML editor. The schemaLocations in the new files are all usable to help validate from within editors like Oxygen.
All you need is one xmlns declaration at the top with the one namespace used, and everything else should be doable now with no prefixes.
-- Scott
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
</body>
</html>