<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I am trying to configure the attribute and along the way I have run into this error<div class=""><br class=""></div><div class=""><div class="">2018-01-30 11:08:34,904 - ERROR [net.shibboleth.utilities.java.support.security.DataSealer:214] - Exception unwrapping data</div><div class="">java.io.EOFException: null</div><div class=""> at java.io.DataInputStream.readFully(DataInputStream.java:197)</div><div class="">2018-01-30 11:08:34,906 - ERROR [org.opensaml.storage.impl.client.ClientStorageService:425] - StorageService shibboleth.ClientSessionStorageService: Exception unwrapping secured data</div><div class="">net.shibboleth.utilities.java.support.security.DataSealerException: Exception unwrapping data</div><div class=""> at net.shibboleth.utilities.java.support.security.DataSealer.unwrap(DataSealer.java:215)</div><div class="">Caused by: java.io.EOFException: null</div><div class=""> at java.io.DataInputStream.readFully(DataInputStream.java:197)</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">I’m simply attempting to get the uid from the authenticated user. I’m not entirely sure what this error is suggesting, but “Exception unwrapping secured data” makes me think that the kid is encrypted somehow?</div><div class="">The only other resource on an error like this that I’ve found had dealt with configuring shibboleth to use CAS but I am not doing that, I am using SAML. (<a href="http://shibboleth.1660669.n2.nabble.com/CAS-and-HTML-local-storage-td7625739.html" class="">http://shibboleth.1660669.n2.nabble.com/CAS-and-HTML-local-storage-td7625739.html</a>)</div><div class=""> Below I have provided my attribute-resolver.xml and attribute-filter.xml. Please let me know if there are any other documents or info</div><div class=""><br class=""></div><div class="">---------------------------------------------------------------------------My attribute-resolver.xml---------------------------------------------------------------------------</div><div class=""><div class=""><br class=""></div><div class=""><?xml version="1.0" encoding="UTF-8"?></div><div class=""><AttributeResolver</div><div class=""> xmlns="urn:mace:shibboleth:2.0:resolver"</div><div class=""> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" class="">http://www.w3.org/2001/XMLSchema-instance</a>"</div><div class=""> xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd" class="">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd</a>"></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> <!-- ========================================== --></div><div class=""> <!-- Attribute Definitions --></div><div class=""> <!-- ========================================== --></div><div class=""><br class=""></div><div class=""> <AttributeDefinition xsi:type="Simple" id="uid" sourceAttributeID="uid"></div><div class=""> <Dependency ref="myLDAP" /></div><div class=""> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /></div><div class=""> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /></div><div class=""> </AttributeDefinition></div><div class=""><br class=""></div><div class=""> <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}" sourceAttributeID="uid"></div><div class=""> <Dependency ref="uid" /></div><div class=""> <AttributeEncoder xsi:type="SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonPrincipalName" encodeType="false" /></div><div class=""> <AttributeEncoder xsi:type="SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" encodeType="false" /></div><div class=""> </AttributeDefinition></div><div class=""><br class=""></div><div class=""> <AttributeDefinition id="mail" xsi:type="Template"></div><div class=""> <Dependency ref="uid" /></div><div class=""> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /></div><div class=""> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /></div><div class=""> <Template></div><div class=""> <![CDATA[</div><div class=""> ${<a href="mailto:uid}@example.org" class="">uid}@example.org</a></div><div class=""> ]]></div><div class=""> </Template></div><div class=""> <SourceAttribute>uid</SourceAttribute></div><div class=""> </AttributeDefinition></div><div class=""><br class=""></div><div class=""> <AttributeDefinition id="eduPersonScopedAffiliation" xsi:type="Scoped" scope="%{idp.scope}" sourceAttributeID="affiliation"></div><div class=""> <Dependency ref="staticAttributes" /></div><div class=""> <AttributeEncoder xsi:type="SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" encodeType="false" /></div><div class=""> <AttributeEncoder xsi:type="SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" friendlyName="eduPersonScopedAffiliation" encodeType="false" /></div><div class=""> </AttributeDefinition></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> <!-- ========================================== --></div><div class=""> <!-- Data Connectors --></div><div class=""> <!-- ========================================== --></div><div class=""><br class=""></div><div class=""> <DataConnector id="staticAttributes" xsi:type="Static"></div><div class=""> <Attribute id="affiliation"></div><div class=""> <Value>member</Value></div><div class=""> </Attribute></div><div class=""> </DataConnector></div><div class=""><br class=""></div><div class=""> <DataConnector id="myLDAP" xsi:type="LDAPDirectory"</div><div class=""> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"</div><div class=""> baseDN="%{idp.attribute.resolver.LDAP.baseDN}"</div><div class=""> principal="%{idp.attribute.resolver.LDAP.bindDN}"</div><div class=""> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"</div><div class=""> useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:false}"</div><div class=""> connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"</div><div class=""> responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"></div><div class=""> <FilterTemplate></div><div class=""> <![CDATA[</div><div class=""> %{idp.attribute.resolver.LDAP.searchFilter}</div><div class=""> ]]></div><div class=""> </FilterTemplate></div><div class=""> </DataConnector></div><div class=""></AttributeResolver></div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">---------------------------------------------------------------------------my attribute-filter.xml---------------------------------------------------------------------------</div><div class=""><br class=""></div><div class=""><div class=""><AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"</div><div class=""> xmlns="urn:mace:shibboleth:2.0:afp"</div><div class=""> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" class="">http://www.w3.org/2001/XMLSchema-instance</a>"</div><div class=""> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp <a href="http://shibboleth.net/schema/idp/shibboleth-afp.xsd" class="">http://shibboleth.net/schema/idp/shibboleth-afp.xsd</a>"></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> <AttributeRule attributeID="uid"></div><div class=""> <PermitValueRule xsi:type="ANY" /></div><div class=""> </AttributeRule></div><div class=""><br class=""></div><div class=""></AttributeFilterPolicyGroup></div></div></body></html>