<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Trevor,
<div class=""><br class="">
</div>
<div class="">Try adding dc: to your FilterTemplate, and I think you need the LDAPProperty setting to be at the end of the main DataConnector element’s child elements. I don’t know what the schema’s precise requirements are for the ordering of elements, but
that’s what it’s choking on.</div>
<div class=""><br class="">
</div>
<div class="">Hope this helps,</div>
<div class="">Nate.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Mar 29, 2016, at 14:30, Trevor Robinson <<a href="mailto:tprobinson93@gmail.com" class="">tprobinson93@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">Hello,
<div class=""><br class="">
</div>
<div class="">Thanks for your reply, unfortunately that didn't seem to help. I tried <dc:FilterTemplate> and <FilterTemplate>, with the removal of the xmlns and changing the type to dc:LDAPDirectory. Here's the log and the DataConnector.</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 153 in XML document from file [/opt/shibboleth-idp/conf/attribute-resolver.xml] is invalid; nested exception
is org.xml.sax.SAXParseException; lineNumber: 153; columnNumber: 28; cvc-complex-type.2.4.a: Invalid content was found starting with element 'dc:FilterTemplate'. One of '{"urn:mace:shibboleth:2.0:resolver:dc":LDAPProperty, "urn:mace:shibboleth:2.0:resolver:dc":StartTLSTrustCredential,
"urn:mace:shibboleth:2.0:resolver:dc":StartTLSAuthenticationCredential, "urn:mace:shibboleth:2.0:resolver:dc":ConnectionPool, "urn:mace:shibboleth:2.0:resolver:dc":Column, "urn:mace:shibboleth:2.0:resolver:dc":ResultCache, "urn:mace:shibboleth:2.0:resolver:dc":ResultCacheBean}'
is expected.</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><font face="monospace, monospace" class=""><resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</font></div>
<div class=""><font face="monospace, monospace" class=""> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"</font></div>
<div class=""><font face="monospace, monospace" class=""> baseDN="%{idp.attribute.resolver.LDAP.baseDN}"</font></div>
<div class=""><font face="monospace, monospace" class=""> principal="%{idp.attribute.resolver.LDAP.bindDN}"</font></div>
<div class=""><font face="monospace, monospace" class=""> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"</font></div>
<div class=""><font face="monospace, monospace" class=""> useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"></font></div>
<div class=""><font face="monospace, monospace" class=""> <span class="" style="white-space:pre">
</span><dc:LDAPProperty name="java.naming.referral" value="follow"/></font></div>
<div class=""><font face="monospace, monospace" class=""><br class="">
</font></div>
<div class=""><font face="monospace, monospace" class=""> <FilterTemplate></font></div>
<div class=""><font face="monospace, monospace" class=""> <![CDATA[</font></div>
<div class=""><font face="monospace, monospace" class=""> %{idp.attribute.resolver.LDAP.searchFilter}</font></div>
<div class=""><font face="monospace, monospace" class=""> ]]></font></div>
<div class=""><font face="monospace, monospace" class=""> </FilterTemplate></font></div>
<div class=""><font face="monospace, monospace" class=""> <dc:ReturnAttributes>%{idp.attribute.resolver.LDAP.returnAttributes}</dc:ReturnAttributes></font></div>
<div class=""><font face="monospace, monospace" class=""> <dc:StartTLSTrustCredential id="LDAPtoIdPCredential" xsi:type="sec:X509ResourceBacked" xmlns:security="urn:mace:shibboleth:2.0:security"></font></div>
<div class=""><font face="monospace, monospace" class=""> <security:Certificate>%{idp.attribute.resolver.LDAP.trustCertificates}</security:Certificate></font></div>
<div class=""><font face="monospace, monospace" class=""> </dc:StartTLSTrustCredential></font></div>
<div class=""><font face="monospace, monospace" class=""> <dc:ResultCache elementTimeToLive="PT1H" /></font></div>
<div class=""><font face="monospace, monospace" class=""> </resolver:DataConnector></font></div>
</div>
<div class=""><br class="">
</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Tue, Mar 29, 2016 at 12:38 PM, Nate Klingenstein <span dir="ltr" class="">
<<a href="mailto:nate.klingenstein@utah.edu" target="_blank" class="">nate.klingenstein@utah.edu</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Trevor,<br class="">
<br class="">
It looks to me like you’ve set the default namespace on your resolver:DataConnector element to xmlns="urn:mace:shibboleth:2.0:resolver:dc”. I would try removing that. You may need to add the dc: namespace to your xsi:type.<br class="">
<br class="">
Thanks,<br class="">
Nate.<br class="">
<div class="">
<div class="h5"><br class="">
> On Mar 29, 2016, at 13:30, Trevor Robinson <<a href="mailto:tprobinson93@gmail.com" class="">tprobinson93@gmail.com</a>> wrote:<br class="">
><br class="">
> Hello,<br class="">
><br class="">
> I've been trying to set up Shibboleth for the first time, and I'm hitting a strange problem. In attribute-resolver.xml, I'm trying to define a <FilterTemplate> for my LDAPDirectory, but Shibboleth bails on parsing the file saying that it doesn't know what
a FilterTemplate element is, as if the namespace is wrong. I've tried the example from the wiki, and examples from other places, with the xmlns and without, and with the element dc: prefix and without. It also treats ReturnAttributes in the same way.<br class="">
><br class="">
> Here's a pastebin of my attribute-resolver.xml: <a href="http://pastebin.com/ZZbeCbjf" rel="noreferrer" target="_blank" class="">
http://pastebin.com/ZZbeCbjf</a><br class="">
> Here's a pastebin of the errors: <a href="http://pastebin.com/jp0et3VY" rel="noreferrer" target="_blank" class="">
http://pastebin.com/jp0et3VY</a><br class="">
><br class="">
> Thanks,<br class="">
><br class="">
</div>
</div>
> Trevor Robinson--<br class="">
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a><br class="">
<span class="HOEnZb"><font color="#888888" class=""><br class="">
--<br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></font></span></blockquote>
</div>
<br class="">
</div>
-- <br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>