<div dir="ltr"><div>Hi,</div><div></div><div><br></div><div>I am getting <b>Context initialization failed </b>error after changing default attribute-resolver.xml file with LDAP connector. The webpage also gives Service Unavailable error. If i revert the file back to default settings, the service starts working. I am using the same files in other IDP server and it is working fine. But i dont know why its giving error on this IDP server.<br></div><div><br></div><div><u>IDP-Process Log:</u></div><div><br></div><div>2018-07-16 09:49:08,364 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:216] - Service 'shibboleth.LoggingService': Completing shutdown<br>2018-07-16 09:49:08,364 - ERROR [org.springframework.web.context.ContextLoader:350] - Context initialization failed<br>org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.RegisterMetricSets$child#0' defined in file [C:\Program Files (x86)\Shibboleth\IdP\system\conf\..\..\conf\admin\metrics.xml]: Cannot resolve reference to bean 'shibboleth.metrics.AttributeResolverGaugeSet' while setting bean property 'arguments' with key [7]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.AttributeResolverGaugeSet' defined in file [C:\Program Files (x86)\Shibboleth\IdP\system\conf\general-admin-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<br> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)<br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.metrics.AttributeResolverGaugeSet' defined in file [C:\Program Files (x86)\Shibboleth\IdP\system\conf\general-admin-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<br> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1630)<br>Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Injected service was null or not an AttributeResolver<br> at net.shibboleth.idp.attribute.resolver.impl.AttributeResolverServiceGaugeSet.doInitialize(AttributeResolverServiceGaugeSet.java:104)<br><br></div><div>
<div><br></div><div><b>attribute-resolver.xml</b></div>
</div><div><br></div><div><?xml version="1.0" encoding="UTF-8"?><br><AttributeResolver<br> xmlns="urn:mace:shibboleth:2.0:resolver"<br> xmlns:sec="urn:mace:shibboleth:2.0:security"<br> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"<br> xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd</a><br> urn:mace:shibboleth:2.0:security <a href="http://shibboleth.net/schema/idp/shibboleth-security.xsd">http://shibboleth.net/schema/idp/shibboleth-security.xsd</a>"><br><br> <!-- ========================================== --><br> <!-- Attribute Definitions --><br> <!-- ========================================== --><br><br> <!-- Schema: Core schema attributes--><br><br> <AttributeDefinition xsi:type="Simple" id="uid" sourceAttributeID="sAMAccountName"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="mail" sourceAttributeID="mail"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="homePhone" sourceAttributeID="homePhone"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:homePhone" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.20" friendlyName="homePhone" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="homePostalAddress" sourceAttributeID="homePostalAddress"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:homePostalAddress" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.39" friendlyName="homePostalAddress" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="mobileNumber" sourceAttributeID="mobile"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:mobile" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.41" friendlyName="mobile" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="surname" sourceAttributeID="sn"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:sn" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.4" friendlyName="sn" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="organizationName" sourceAttributeID="o"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:o" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.10" friendlyName="o" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="title" sourceAttributeID="title"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:title" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.12" friendlyName="title" encodeType="false" /><br> </AttributeDefinition><br><br><br> <AttributeDefinition xsi:type="Simple" id="telephoneNumber" sourceAttributeID="telephoneNumber"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:telephoneNumber" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.20" friendlyName="telephoneNumber" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="givenName" sourceAttributeID="givenName"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:givenName" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.5.4.42" friendlyName="givenName" encodeType="false" /><br> </AttributeDefinition><br><br> <AttributeDefinition xsi:type="Simple" id="displayName" sourceAttributeID="displayName"><br> <Dependency ref="LDAP" /><br> <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:displayName" encodeType="false" /><br> <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" /><br> </AttributeDefinition><br><br> <!-- ========================================== --><br> <!-- Data Connectors --><br> <!-- ========================================== --><br><br> <DataConnector id="LDAP" xsi:type="LDAPDirectory"<br> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"<br> baseDN="%{idp.attribute.resolver.LDAP.baseDN}" <br> principal="%{idp.attribute.resolver.LDAP.bindDN}"<br> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"<br> useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"<br> connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"<br> responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"><br> <FilterTemplate><br> <![CDATA[<br> %{idp.attribute.resolver.LDAP.searchFilter}<br> ]]><br> </FilterTemplate><br> <br> <ReturnAttributes>%{idp.attribute.resolver.LDAP.returnAttributes}</ReturnAttributes><br> <ReturnAttributes>%{idp.authn.LDAP.returnAttributes}</ReturnAttributes> <br> </DataConnector><br><br></AttributeResolver><br></div><div><br></div><div><br></div><div></div><div>Thanks,</div><div><div><div class="gmail_signature"><div dir="ltr"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)"></span><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><br><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><div><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><span style="color:rgb(32,18,77)"></span><span style="color:rgb(31,73,125)"><a href="mailto:waqas.ahmed0@gmail.com" target="_blank"><span style="color:blue"></span></a></span><span style="font-size:12pt;font-family:"Times New Roman","serif""></span> <br><div style="padding:0px;overflow:hidden;margin-left:0px;margin-top:0px;color:black;text-align:left;line-height:130%"><br><br></div></div></div></div></div>
</div></div>