<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.MsoNoSpacing, li.MsoNoSpacing, div.MsoNoSpacing
{mso-style-priority:1;
margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle23
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">The salt value goes in secrets.properties in the credentials folder.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Our v3 config had mention of the algorithm in some of the provided config files but none of the live config files so I’d guess if it’s not in yours then like us you’re using the defaults. saml-nameid.properties
had the persistentId.encoding value set in our v3 config. (BASE32)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Can you copy your v3 linux config across to the windows server and do an upgrade from there? (or upgrade a copy of the v3 config on the Suse box and then copy it to the windows server?)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Cheers,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"> Duncan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> users <users-bounces@shibboleth.net>
<b>On Behalf Of </b>Dave Perry<br>
<b>Sent:</b> 18 February 2022 13:58<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> ComputedID attribute resolver setup (IdP v4)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Hi all <o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">I have hit a few brick walls with upgrading our old v3 IdP to v4 (OS and Jetty), so starting from scratch on a new windows server installation.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">After base install, the status.bat shows the IdP is running - good start.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Configuring attribute resolution, I need to port the old computedID connector and salt (snippet below):<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><resolver:DataConnector xsi:type="ComputedId" xmlns="urn:mace:shibboleth:2.0:resolver:dc"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> id="computedIDv3"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> generatedAttributeID="computedID"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> sourceAttributeID="sAMAccountName"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> salt="mySaltGoesHere"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> <resolver:Dependency ref="myLDAP" /><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"> </resolver:DataConnector><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">(actual salt removed for obvious reasons).<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">The example I've found for v4 is as follows:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><DataConnector id="computedID" xsi:type="ComputedId" generatedAttributeID="computedId" salt="%{idp.persistentId.salt}" algorithm="%{idp.persistentId.algorithm:SHA}" encoding="%{idp.persistentId.encoding:BASE32}"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><InputDataConnector ref="myLDAP" attributeNames="sAMAccountName" /><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"></DataConnector><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">I can't find the persistentId.salt value in idp.properties - do I need to add it?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">More importantly, unsure what the algorithm and encoding attribute values need to be, as I can't find where these are defined in my v3 config. Any pointers as to where to look?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Thanks<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Dave<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div id="Signature">
<div>
<div id="divtagdefaultwrapper">
<p><b><span style="font-size:10.0pt;color:#262626">Dave Perry</span></b><span style="font-size:10.0pt;color:#262626"> | eLearning Technologist | eLearning & Libraries | L32 (Library)<br>
Hull College, Queen's Gardens, Wilberforce Drive, Kingston-Upon-Hull, HU1 3DG.<br>
</span><span style="font-size:10.0pt;font-family:Wingdings;color:#262626">(</span><span style="font-size:10.0pt;color:#262626"> 01482 381930 (Ext: 2230) | </span><span style="font-size:10.0pt;font-family:Wingdings;color:#262626">*</span><span style="font-size:10.0pt;color:#262626"> </span><span style="color:black"><a href="mailto:Dave.Perry@hull-college.ac.uk" target="_blank"><span style="font-size:10.0pt;color:#262626">Dave.Perry@hull-college.ac.uk</span></a></span><span style="font-size:10.0pt;color:#262626"> | </span><span style="color:black"><a href="https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hull-college.ac.uk%2F&data=04%7C01%7Cdbb%40st-andrews.ac.uk%7Cd7b79d6b73604c5ab69a08d9f2e6c06b%7Cf85626cb0da849d3aa5864ef678ef01a%7C0%7C0%7C637807896016531310%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=hUetkeZnFRkjE%2FTPEFw883yrrbbGFvZks1xPaDYAaE8%3D&reserved=0" target="_blank"><span style="font-size:10.0pt;color:#262626">www.hull-college.ac.uk</span></a></span><span style="font-size:10.0pt;color:#262626">
</span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p><span style="font-size:12.0pt;color:black">Sent via webmail/mobile<o:p></o:p></span></p>
<p><strong><span style="font-size:12.0pt;font-family:"Calibri",sans-serif;color:black">* Need a fast response? Contact
<a href="mailto:elearning@hull-college.ac.uk"><span style="font-weight:normal">elearning@hull-college.ac.uk</span></a> *</span></strong><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left">
<tbody>
<tr>
<td width="100%" style="width:100.0%;padding:0cm 0cm 0cm 0cm">
<div>
<div>
<p style="background:lightskyblue;mso-element:frame;mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly">
<span style="font-size:8.0pt;color:black">If you need support for your mental health, out of college hours, please contact the following:<br>
Hull & East Riding – Crisis Team (Adults) Tel: 0800 138 0990 and Children Services Tel: 01482 301701<br>
<br>
If you live in a different local authority area please access the following link for mental health services in your local area –
<a href="https://hubofhope.co.uk/">https://hubofhope.co.uk/</a> <br>
Other important local services<br>
Hull & East Yorkshire MIND – Tel: 01482 240133<br>
Hull Domestic Abuse Partnership – Tel: 01482 318759<br>
Samaritans – Tel: 116 123<br>
Papyrus – Tel: 0800 068 4141</span><o:p></o:p></p>
</div>
</div>
</td>
</tr>
</tbody>
</table>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNoSpacing"><span style="font-size:8.5pt;font-family:"Arial",sans-serif">This message is sent in confidence for the addressee only. It may contain confidential or sensitive information. The contents are not to be disclosed to anyone other than
the addressee. Unauthorised recipients are requested to preserve this confidentiality and to advise us of any errors in transmission. Any views expressed in this message are solely the views of the individual and do not represent the views of the College.
Nothing in this message should be construed as creating a contract.</span><o:p></o:p></p>
<p class="MsoNoSpacing"><span style="font-size:8.5pt;font-family:"Arial",sans-serif">Hull College Group owns the email infrastructure, including the contents.</span><o:p></o:p></p>
<p class="MsoNoSpacing"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#94BD7B">Hull College Group is committed to sustainability, please reflect before printing this email.</span><o:p></o:p></p>
</div>
</body>
</html>