<div dir="ltr"><br><div class="gmail_quote"><div dir="ltr">I got following error while integrate LDAP with Shibboleth:
<br><b>net.shibboleth.utilities.java.<wbr>support.service.<wbr>ServiceException:
org.springframework.beans.<wbr>factory.BeanCreationException: Error creating
bean with name 'myLDAP': Invocation of init method failed; nested
exception is
net.shibboleth.utilities.java.<wbr>support.component.<wbr>ComponentInitializationExcepti<wbr>on:
Data Connector 'myLDAP': Invalid connector configuration
<br>org.springframework.beans.<wbr>factory.BeanCreationException: Error
creating bean with name 'shibboleth.metrics.<wbr>RegisterMetricSets$child#0'
defined in file
[/opt/shibboleth-idp/system/<wbr>conf/../../conf/admin/metrics.<wbr>xml]: Cannot
resolve reference to bean 'shibboleth.metrics.<wbr>AttributeResolverGaugeSet'
while setting bean property 'arguments' with key [7]; nested exception
is org.springframework.beans.<wbr>factory.BeanCreationException: Error
creating bean with name 'shibboleth.metrics.<wbr>AttributeResolverGaugeSet'
defined in file
[/opt/shibboleth-idp/system/<wbr>conf/general-admin-system.xml]<wbr>: Invocation
of init method failed; nested exception is
net.shibboleth.utilities.java.<wbr>support.component.<wbr>ComponentInitializationExcepti<wbr>on:
Injected service was null or not an AttributeResolver
<br></b><br><b><br><b>attribute-resolver.xml</b><br><?xml version="1.0" encoding="UTF-8"?>
<br><AttributeResolver
<br> xmlns="urn:mace:shibboleth:2.<wbr>0:resolver"
<br> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance%22" rel="nofollow" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance"</a><br> xsi:schemaLocation="urn:mace:<wbr>shibboleth:2.0:resolver <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd%22%3E" rel="nofollow" target="_blank">http://shibboleth.net/schema/<wbr>idp/shibboleth-attribute-<wbr>resolver.xsd"></a><br><?xml version="1.0" encoding="UTF-8"?>
<br><AttributeResolver
<br> xmlns="urn:mace:shibboleth:2.<wbr>0:resolver"
<br> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance%22" rel="nofollow" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance"</a><br> xsi:schemaLocation="urn:mace:<wbr>shibboleth:2.0:resolver <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd%22%3E" rel="nofollow" target="_blank">http://shibboleth.net/schema/<wbr>idp/shibboleth-attribute-<wbr>resolver.xsd"></a><br> <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Prescoped" sourceAttributeID="<wbr>eduPersonPrincipalName"><br> <Dependency ref="myLDAP" /><br>
<AttributeEncoder xsi:type="SAML1ScopedString"
name="urn:mace:dir:attribute-<wbr>def:eduPersonPrincipalName"
encodeType="false" /><br> <AttributeEncoder
xsi:type="SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.<wbr>5923.1.1.1.6"
friendlyName="<wbr>eduPersonPrincipalName" encodeType="false" /><br> </AttributeDefinition><br> <AttributeDefinition id="uid" xsi:type="Simple" sourceAttributeID="uid"><br> <Dependency ref="myLDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-<wbr>def:uid" encodeType="false" /><br>
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.<wbr>19200300.100.1.1" friendlyName="uid"
encodeType="false" /><br> </AttributeDefinition><br> <AttributeDefinition id="mail" xsi:type="Simple" sourceAttributeID="mail"><br> <Dependency ref="myLDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-<wbr>def:mail" encodeType="false" /><br>
<AttributeEncoder xsi:type="SAML2String"
name="urn:oid:0.9.2342.<wbr>19200300.100.1.3" friendlyName="mail"
encodeType="false" /><br> </AttributeDefinition><br> <DataConnector id="myLDAP" xsi:type="LDAPDirectory"
<br> ldapURL="%{idp.attribute.<wbr>resolver.LDAP.ldapURL}"
<br> baseDN="%{idp.attribute.<wbr>resolver.LDAP.baseDN}"
<br> principal="%{idp.attribute.<wbr>resolver.LDAP.bindDN}"
<br> principalCredential="%{idp.<wbr>attribute.resolver.LDAP.<wbr>bindDNCredential}"
<br> useStartTLS="%{idp.attribute.<wbr>resolver.LDAP.useStartTLS:<wbr>false}"
<br> connectTimeout="%{idp.<wbr>attribute.resolver.LDAP.<wbr>connectTimeout}"
<br> responseTimeout="%{idp.<wbr>attribute.resolver.LDAP.<wbr>responseTimeout}"><br> <FilterTemplate><br> </b><pre><![CDATA[
%{idp.attribute.resolver.LDAP.<wbr>searchFilter}
]]></pre><br> </FilterTemplate><br> <ConnectionPool
<br> minPoolSize="%{idp.pool.LDAP.<wbr>minSize:0}"
<br> maxPoolSize="%{idp.pool.LDAP.<wbr>maxSize:10}"
<br> blockWaitTime="%{idp.pool.<wbr>LDAP.blockWaitTime:PT3S}"
<br> validatePeriodically="%{idp.<wbr>pool.LDAP.<wbr>validatePeriodically:true}"
<br> validateTimerPeriod="%{idp.<wbr>pool.LDAP.validatePeriod:PT3S}<wbr>"
<br> expirationTime="%{idp.pool.<wbr>LDAP.idleTime:PT10M}"
<br> failFastInitialize="%{idp.<wbr>pool.LDAP.failFastInitialize:<wbr>false}" /><br> </DataConnector><br></AttributeResolver><br><br><b>ldap.properties</b><br>idp.authn.LDAP.authenticator = anonSearchAuthenticator
<br>idp.authn.LDAP.ldapURL = ldap://localhost:389
<br><br>idp.authn.LDAP.useStartTLS = false
<br>idp.authn.LDAP.useSSL = false
<br><br><br>idp.authn.LDAP.<wbr>returnAttributes = passwordExpirationTime,<wbr>loginGraceRemaining
<br><br><br>idp.authn.LDAP.baseDN = ou=Staff,dc=##,dc=#,dc=#
<br>#idp.authn.LDAP.subtreeSearch = false
<br>idp.authn.LDAP.userFilter = (uid={user})
<br># for AD: idp.authn.LDAP.bindDN=<a href="mailto:adminuser@domain.com" target="_blank">adminuse<wbr>r@domain.com</a>
<br>idp.authn.LDAP.bindDN = uid=#,ou=Staff
<br>idp.authn.LDAP.<wbr>bindDNCredential = #
<br><br>idp.authn.LDAP.dnFormat = cn=%s,ou=Staff,dc=#,dc=#,dc=#
<br>idp.attribute.resolver.LDAP.<wbr>returnAttributes = uid,mail
<br><br>idp.attribute.resolver.LDAP.<wbr>ldapURL = %{idp.authn.LDAP.ldapURL}
<br>idp.attribute.resolver.LDAP.<wbr>baseDN = %{idp.authn.LDAP.baseDN:<wbr>undefined}
<br>idp.attribute.resolver.LDAP.<wbr>bindDN = %{idp.authn.LDAP.bindDN:<wbr>undefined}
<br>idp.attribute.resolver.LDAP.<wbr>bindDNCredential = %{idp.authn.LDAP.<wbr>bindDNCredential:undefined}
<br>idp.attribute.resolver.LDAP.<wbr>useStartTLS = %{idp.authn.LDAP.useStartTLS:<wbr>false}
<br>idp.attribute.resolver.LDAP.<wbr>searchFilter = (uid=$requestContext.<wbr>principal)
<br>idp.attribute.resolver.LDAP.<wbr>responseTimeout = 30000
<br>idp.attribute.resolver.LDAP.<wbr>connectTimeout = 30000
</div>
</div><br></div>