<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Arial","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=FR link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Hi, I’m trying to deploy the lastest IDP (v3.2.0) and I got a problem with the parsing of my <b><i>attribute-filter.xml</i> </b>file…<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xmlns="urn:mace:shibboleth:2.0:afp"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd"><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <!-- Release the transient ID to anyone --><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone"><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:PolicyRequirementRule xsi:type="basic:ANY"/><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="transientId"><afp:PermitValueRule xsi:type="basic:ANY"/> </afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="myId"><afp:PermitValueRule xsi:type="basic:ANY" /></afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="myRole"> <afp:PermitValueRule xsi:type="basic:ANY" /></afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> </afp:AttributeFilterPolicy><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'></AttributeFilterPolicyGroup><o:p></o:p></span></i></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><u><span lang=EN-US style='font-family:"Arial","sans-serif"'>ERROR in /opt/shibboleth-idp/logs/idp-process.log<o:p></o:p></span></u></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>…<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>2016-07-07 14:26:18,103 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.AttributeFilterService': Initial load failed<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 22 in XML document from file [/opt/shibb$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 22 in XML document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; nest$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Caused by: org.xml.sax.SAXParseException: Le préfixe "afp" de l'élément "afp:AttributeFilterPolicy" n'est pas lié.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)…<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>As the server and the system where shibboleth IDP has NO ACCESS to the Internet… I tried to adapt my “old” version which is working in an old system with an IDP v2.3.6… then I downloaded the xsd file and I put it in <b>/opt/shibboleth-idp/schema/</b> <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>My new <b>attribute-filter.xml</b> file is like this :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xmlns="urn:mace:shibboleth:2.0:afp"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp classpath:/opt/shibboleth-idp/schema/shibboleth-2.0-afp.xsd"><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <!-- Release the transient ID to anyone --><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone"><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:PolicyRequirementRule xsi:type="basic:ANY"/><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="transientId"><afp:PermitValueRule xsi:type="basic:ANY"/> </afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="myID"><afp:PermitValueRule xsi:type="basic:ANY" /></afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> <afp:AttributeRule attributeID="myRole"> <afp:PermitValueRule xsi:type="basic:ANY" /></afp:AttributeRule><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'> </afp:AttributeFilterPolicy><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'></afp:AttributeFilterPolicyGroup><o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-family:"Courier New"'><o:p> </o:p></span></i></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><b><u><span lang=EN-US style='font-family:"Arial","sans-serif"'>Problem :</span></u></b><span lang=EN-US style='font-family:"Arial","sans-serif"'> I always got errors and WARN in :<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><u><span lang=EN-US style='font-family:"Arial","sans-serif"'>/opt/shibboleth-idp/logs/idp-process.log<o:p></o:p></span></u></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>2016-07-07 14:57:11,287 - WARN [net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:48] - Ignored XML validation warning<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>org.xml.sax.SAXParseException: schema_reference.4 : Echec de la lecture du document de schéma 'classpath:/opt/shibboleth-idp/schema/shibboleth-afp.xsd' pour les raisons suivantes :$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Caused by: java.io.FileNotFoundException: Unable to load the resource [classpath:/opt/shibboleth-idp/schema/shibboleth-afp.xsd] using the thread context class loader or the current$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at org.apache.catalina.webresources.ClasspathURLStreamHandler.openConnection(ClasspathURLStreamHandler.java:45)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>2016-07-07 14:57:11,291 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:231] - Service 'shibboleth.AttributeFilterService': Reload for shibboleth.A$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibbo$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; neste$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Caused by: org.xml.sax.SAXParseException: cvc-elt.1 : Déclaration de l'élément 'AttributeFilterPolicyGroup' introuvable.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> </span><span lang=EN-US style='font-family:"Arial","sans-serif"'>at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><u><span lang=EN-US style='font-family:"Arial","sans-serif"'>/opt/shibboleth-idp/logs/idp-warn.log<o:p></o:p></span></u></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>2016-07-07 14:57:11,287 - WARN [net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:48] - Ignored XML validation warning<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>org.xml.sax.SAXParseException: schema_reference.4 : Echec de la lecture du document de schéma 'classpath:/opt/shibboleth-idp/schema/shibboleth-afp.xsd' pour les raisons suivantes :$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Caused by: java.io.FileNotFoundException: Unable to load the resource [classpath:/opt/shibboleth-idp/schema/shibboleth-afp.xsd] using the thread context class loader or the current$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at org.apache.catalina.webresources.ClasspathURLStreamHandler.openConnection(ClasspathURLStreamHandler.java:45)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>2016-07-07 14:57:11,291 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:231] - Service 'shibboleth.AttributeFilterService': Reload for shibboleth.A$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibbo$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibboleth-idp/conf/attribute-filter.xml] is invalid; neste$<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'> at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Caused by: org.xml.sax.SAXParseException: cvc-elt.1 : Déclaration de l'élément 'AttributeFilterPolicyGroup' introuvable.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'> </span><span lang=EN-US style='font-family:"Arial","sans-serif"'>at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'>So please, where do I have to put shibboleth-afp.xsd file to have my attribute-filter.xml file parsed correctly ?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=DE style='color:#002060;mso-fareast-language:FR'>Bertrand Fugagnoli<o:p></o:p></span></b></p><p class=MsoNormal><span style='mso-fareast-language:FR'>[@@OPEN@@]<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>