<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I'm attempting to upgrade a Shibboleth IdP installation to 3.3.1, from 3.2.1, on Linux. I followed the instructions on the confluence, IDP30/Upgrading page. Everything seemed to go smoothly, but Tomcat gave 404 errors when I tried to
access the default /idp/shibboleth xml file.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Next, I tried doing a clean install, which again went smoothly. This time, Tomcat worked, but without the content. I managed to get the metadata put into the new system and to modify the metadata-provider.xml file so that Tomcat still
worked. But now I'm having trouble recreating the attribute-resolver.xml file with the old modifications. Pretty much anything I add in causes Tomcat to die. It seems that the namespace system has been changed, and that should require extensive modification
throughout the file. But so far I haven't been able to get anything to work.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For example, we have an id attribute from our LDAP called unlUNCWID. The original file handled it as:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#7030A0"> <resolver:AttributeDefinition id="unlUNCWID" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> sourceAttributeID="unlUNCWID"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <resolver:Dependency ref="myLDAP" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> name="urn:mace:dir:attribute-def:unlUNCWID" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> name="urn:oid:1.3.6.1.4.1.9904.1.1.1.1.8" friendlyName="unlUNCWID" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> </resolver:AttributeDefinition><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I modified it, as well as I could work out from examples in the new attribute-resolver.xml file, to be:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#7030A0"> <AttributeDefinition id="unlUNCWID" xsi:type="Simple" sourceAttributeID="unlUNCWID"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <Dependency ref="myLDAP" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:unlCWID" encodeType="false" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:1.3.6.1.4.1.9904.1.1.1.1.8" friendlyName="unlUNCWID" encodeType="false" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> <SourceAttribute>unlUNCWID</SourceAttribute><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> </AttributeDefinition><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When this is added to the new default attribute-resolver.xml file, Tomcat dies. The message at the bottom of the idp-process log is:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#7030A0">2017-03-30 13:46:04,491 - ERROR [org.springframework.web.context.ContextLoader:351] - Context initialization failed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0">org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.RegisterMetricSets$child#0' defined in file [/opt/shibboleth-idp/system/conf/../../conf/admin/metrics.xml]:
Cannot resolve reference to bean 'shibboleth.metrics.AttributeResolverGaugeSet' while setting bean property 'arguments' with key [7]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.AttributeResolverGaugeSet'
defined in file [/opt/shibboleth-idp/system/conf/general-admin-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0">Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.AttributeResolverGaugeSet' defined in file [/opt/shibboleth-idp/system/conf/general-admin-system.xml]:
Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1578)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0">Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7030A0"> at net.shibboleth.idp.attribute.resolver.impl.AttributeResolverServiceGaugeSet.doInitialize(AttributeResolverServiceGaugeSet.java:104)<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any ideas on this? I'm not sure which way to go from here.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Rory<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>