<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Thanks for your reply,<br></div><div><br data-mce-bogus="1"></div><div>For one field ("mail") , i'v relase/comment the call on my attribute-resolver.xml (it's the right thing ?)<br data-mce-bogus="1"></div><div>so for the moment i want test with only mail ..<br data-mce-bogus="1"></div><div>--<br data-mce-bogus="1"></div><div><!--<br data-mce-bogus="1"></div><div> <!--StartFragment--> <AttributeDefinition id="mail" xsi:type="Template"><br> <InputAttributeDefinition ref="uid" /><br> <Template><br> <![CDATA[<br> ${uid}@%{idp.scope}<br> ]]><br> </Template><br> </AttributeDefinition><br><!--EndFragment-->--></div><div>--<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>And add this 2 beans at the end of <!--StartFragment--> <em data-renderer-mark="true">saml-nameid.xml</em> <!--EndFragment--> <br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><!-- SAML 2 NameID Generation --><br> <util:list id="shibboleth.SAML2NameIDGenerators"><br> <ref bean="shibboleth.SAML2TransientGenerator" /><br> <!-- Uncommenting this bean requires configuration in saml-nameid.properties. --><br> <!-- <ref bean="shibboleth.SAML2PersistentGenerator" /> --><br> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br> p:omitQualifiers="true"<br> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br> p:attributeSourceIds="#{ {'mail'} }" /><br> </util:list><br><br> <!-- SAML 1 NameIdentifier Generation --><br> <util:list id="shibboleth.SAML1NameIdentifierGenerators"><br> <ref bean="shibboleth.SAML1TransientGenerator" /><br> <bean parent="shibboleth.SAML1AttributeSourcedGenerator"<br> p:omitQualifiers="true"<br> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br> p:attributeSourceIds="#{ {'mail'} }" /><br> </util:list><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Now, the SP give the same than before, without the mail .. :<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>The SP Log : <br data-mce-bogus="1"></div><div><br></div><!--StartFragment--><div><br></div><div>[root@hancock conf]# service tomcat stop</div><div>root@hancock conf]# > /opt/shibboleth-idp/logs/idp-process.log <br>[root@hancock conf]# service tomcat start</div><!--EndFragment--><div><br></div><div>[root@hancock conf]# tail -f /opt/shibboleth-idp/logs/idp-process.log <br></div><div><br data-mce-bogus="1"></div><div>2024-02-07 16:07:34,814 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.LoggingService': Reload interval set to: PT5M, starting refresh thread<br>2024-02-07 16:07:34,864 - - INFO [net.shibboleth.utilities.java.support.xml.BasicParserPool:648] - XMLSecurityManager of type 'com.sun.org.apache.xerces.internal.utils.XMLSecurityManager' is installed<br>2024-02-07 16:07:34,866 - - INFO [org.opensaml.core.config.InitializationService:49] - Initializing OpenSAML using the Java Services API<br>2024-02-07 16:07:35,678 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmlenc#ripemd160<br>2024-02-07 16:07:35,682 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160<br>2024-02-07 16:07:35,694 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160<br>2024-02-07 16:07:35,886 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:377] - Loading initial default key: secret1<br>2024-02-07 16:07:36,004 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:389] - Default key updated to secret1<br>2024-02-07 16:07:36,224 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeRegistryService': Performing initial load<br>2024-02-07 16:07:36,226 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeRegistryService': Reloading service configuration<br>2024-02-07 16:07:36,462 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeRegistryService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeRegistryService'<br>2024-02-07 16:07:36,463 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeRegistryService': Reload complete<br>2024-02-07 16:07:36,463 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeRegistryService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:36,468 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.MetadataResolverService': Performing initial load<br>2024-02-07 16:07:36,469 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.MetadataResolverService': Reloading service configuration<br>2024-02-07 16:07:36,811 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'<br>2024-02-07 16:07:36,812 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T15:07:41.811515Z' ('2024-02-07T16:07:41.811515+01:00[Europe/Paris]' local time)<br>2024-02-07 16:07:36,818 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.MetadataResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.MetadataResolverService'<br>2024-02-07 16:07:36,818 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.MetadataResolverService': Reload complete<br>2024-02-07 16:07:36,904 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeFilterService': Performing initial load<br>2024-02-07 16:07:36,911 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeFilterService': Reloading service configuration<br>2024-02-07 16:07:37,004 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeFilterService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeFilterService'<br>2024-02-07 16:07:37,004 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeFilterService': Reload complete<br>2024-02-07 16:07:37,005 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeFilterService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:37,010 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeResolverService': Performing initial load<br>2024-02-07 16:07:37,011 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeResolverService': Reloading service configuration<br>2024-02-07 16:07:37,286 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeResolverService'<br>2024-02-07 16:07:37,287 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeResolverService': Reload complete<br>2024-02-07 16:07:37,287 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeResolverService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:37,293 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.NameIdentifierGenerationService': Performing initial load<br>2024-02-07 16:07:37,294 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.NameIdentifierGenerationService': Reloading service configuration<br>2024-02-07 16:07:37,356 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.NameIdentifierGenerationService': Completed reload and swapped in latest configuration for service 'shibboleth.NameIdentifierGenerationService'<br>2024-02-07 16:07:37,357 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.NameIdentifierGenerationService': Reload complete<br>2024-02-07 16:07:37,358 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.NameIdentifierGenerationService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:37,362 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.RelyingPartyResolverService': Performing initial load<br>2024-02-07 16:07:37,362 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.RelyingPartyResolverService': Reloading service configuration<br>2024-02-07 16:07:37,797 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.RelyingPartyResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.RelyingPartyResolverService'<br>2024-02-07 16:07:37,798 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.RelyingPartyResolverService': Reload complete<br>2024-02-07 16:07:37,798 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.RelyingPartyResolverService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:37,801 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableAccessControlService': Performing initial load<br>2024-02-07 16:07:37,801 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableAccessControlService': Reloading service configuration<br>2024-02-07 16:07:37,820 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableAccessControlService': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableAccessControlService'<br>2024-02-07 16:07:37,820 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableAccessControlService': Reload complete<br>2024-02-07 16:07:37,820 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableAccessControlService': Reload interval set to: PT5M, starting refresh thread<br>2024-02-07 16:07:37,828 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableCASServiceRegistry': Performing initial load<br>2024-02-07 16:07:37,829 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableCASServiceRegistry': Reloading service configuration<br>2024-02-07 16:07:37,835 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableCASServiceRegistry': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableCASServiceRegistry'<br>2024-02-07 16:07:37,835 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete<br>2024-02-07 16:07:37,835 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:37,838 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ManagedBeanService': Performing initial load<br>2024-02-07 16:07:37,839 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ManagedBeanService': Reloading service configuration<br>2024-02-07 16:07:37,839 - - INFO [net.shibboleth.ext.spring.util.ApplicationContextBuilder:346] - Skipping non-existent resource: ServletContext resource [/opt/shibboleth-idp/conf/managed-beans.xml]<br>2024-02-07 16:07:37,840 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ManagedBeanService': Completed reload and swapped in latest configuration for service 'shibboleth.ManagedBeanService'<br>2024-02-07 16:07:37,841 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ManagedBeanService': Reload complete<br>2024-02-07 16:07:37,842 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ManagedBeanService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 16:07:38,050 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:55] - Shibboleth IdP Version 4.3.1<br>2024-02-07 16:07:38,051 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:56] - Java version='11.0.21' vendor='Red Hat, Inc.'<br>2024-02-07 16:07:38,052 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] - No Plugins Loaded<br>2024-02-07 16:07:38,067 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:100] - Enabled Modules:<br>2024-02-07 16:07:38,068 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Password Authentication<br>2024-02-07 16:07:38,069 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Hello World<br>2024-02-07 16:07:38,923 - - INFO [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:214] - RemoteUserAuthServlet will process REMOTE_USER, along with attributes [] and headers []<br>2024-02-07 16:07:42,198 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'<br>2024-02-07 16:07:42,198 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T18:07:41.908076Z' ('2024-02-07T19:07:41.908076+01:00[Europe/Paris]' local time)<br><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div> <!--StartFragment--><div>after uncomment this on saml-nameid.properties :<br></div><div>idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient</div><div><br></div><!--EndFragment--> </div><div>If on <!--StartFragment--> <em data-renderer-mark="true">saml-nameid.xml</em><!--EndFragment--> </div><div> i uncomment the ref bean : <!--StartFragment--><ref bean="shibboleth.SAML2PersistentGenerator" /><!--EndFragment--> </div><div><br data-mce-bogus="1"></div><div><br></div><div>I've an error on log : <br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div> <!--StartFragment-->[root@hancock conf]# service tomcat stop </div><div>root@hancock conf]# > /opt/shibboleth-idp/logs/idp-process.log <br>[root@hancock conf]# service tomcat start<br></div><div><br data-mce-bogus="1"></div><div>Redirecting to /bin/systemctl start tomcat.service<br></div><div><br data-mce-bogus="1"></div><div>[root@hancock conf]# tail -f /opt/shibboleth-idp/logs/idp-process.log <br>2024-02-07 15:58:50,256 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.LoggingService': Reload interval set to: PT5M, starting refresh thread<br>2024-02-07 15:58:50,315 - - INFO [net.shibboleth.utilities.java.support.xml.BasicParserPool:648] - XMLSecurityManager of type 'com.sun.org.apache.xerces.internal.utils.XMLSecurityManager' is installed<br>2024-02-07 15:58:50,316 - - INFO [org.opensaml.core.config.InitializationService:49] - Initializing OpenSAML using the Java Services API<br>2024-02-07 15:58:51,194 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmlenc#ripemd160<br>2024-02-07 15:58:51,199 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160<br>2024-02-07 15:58:51,208 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160<br>2024-02-07 15:58:51,370 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:377] - Loading initial default key: secret1<br>2024-02-07 15:58:51,508 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:389] - Default key updated to secret1<br>2024-02-07 15:58:51,737 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeRegistryService': Performing initial load<br>2024-02-07 15:58:51,737 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeRegistryService': Reloading service configuration<br>2024-02-07 15:58:52,017 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeRegistryService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeRegistryService'<br>2024-02-07 15:58:52,019 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeRegistryService': Reload complete<br>2024-02-07 15:58:52,019 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeRegistryService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:52,025 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.MetadataResolverService': Performing initial load<br>2024-02-07 15:58:52,025 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.MetadataResolverService': Reloading service configuration<br>2024-02-07 15:58:52,306 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'<br>2024-02-07 15:58:52,307 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T14:58:57.306470Z' ('2024-02-07T15:58:57.306470+01:00[Europe/Paris]' local time)<br>2024-02-07 15:58:52,312 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.MetadataResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.MetadataResolverService'<br>2024-02-07 15:58:52,313 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.MetadataResolverService': Reload complete<br>2024-02-07 15:58:52,393 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeFilterService': Performing initial load<br>2024-02-07 15:58:52,393 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeFilterService': Reloading service configuration<br>2024-02-07 15:58:52,475 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeFilterService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeFilterService'<br>2024-02-07 15:58:52,476 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeFilterService': Reload complete<br>2024-02-07 15:58:52,477 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeFilterService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:52,484 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeResolverService': Performing initial load<br>2024-02-07 15:58:52,484 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeResolverService': Reloading service configuration<br>2024-02-07 15:58:52,750 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeResolverService'<br>2024-02-07 15:58:52,751 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeResolverService': Reload complete<br>2024-02-07 15:58:52,752 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeResolverService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:52,760 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.NameIdentifierGenerationService': Performing initial load<br>2024-02-07 15:58:52,761 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.NameIdentifierGenerationService': Reloading service configuration<br>2024-02-07 15:58:52,810 - - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:591] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br>2024-02-07 15:58:52,812 - - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:182] - Service 'shibboleth.NameIdentifierGenerationService': Initial load failed<br>net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br> at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)<br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)<br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)<br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1804)<br>Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null<br> at net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore.doInitialize(ComputedPairwiseIdStore.java:274)<br>2024-02-07 15:58:52,816 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:187] - Service 'shibboleth.NameIdentifierGenerationService': Continuing to poll configuration<br>2024-02-07 15:58:52,817 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.NameIdentifierGenerationService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:52,821 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.RelyingPartyResolverService': Performing initial load<br>2024-02-07 15:58:52,822 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.RelyingPartyResolverService': Reloading service configuration<br>2024-02-07 15:58:53,296 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.RelyingPartyResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.RelyingPartyResolverService'<br>2024-02-07 15:58:53,297 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.RelyingPartyResolverService': Reload complete<br>2024-02-07 15:58:53,298 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.RelyingPartyResolverService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:53,301 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableAccessControlService': Performing initial load<br>2024-02-07 15:58:53,301 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableAccessControlService': Reloading service configuration<br>2024-02-07 15:58:53,328 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableAccessControlService': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableAccessControlService'<br>2024-02-07 15:58:53,328 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableAccessControlService': Reload complete<br>2024-02-07 15:58:53,329 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableAccessControlService': Reload interval set to: PT5M, starting refresh thread<br>2024-02-07 15:58:53,337 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableCASServiceRegistry': Performing initial load<br>2024-02-07 15:58:53,338 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableCASServiceRegistry': Reloading service configuration<br>2024-02-07 15:58:53,347 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableCASServiceRegistry': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableCASServiceRegistry'<br>2024-02-07 15:58:53,347 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete<br>2024-02-07 15:58:53,348 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:53,351 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ManagedBeanService': Performing initial load<br>2024-02-07 15:58:53,352 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ManagedBeanService': Reloading service configuration<br>2024-02-07 15:58:53,353 - - INFO [net.shibboleth.ext.spring.util.ApplicationContextBuilder:346] - Skipping non-existent resource: ServletContext resource [/opt/shibboleth-idp/conf/managed-beans.xml]<br>2024-02-07 15:58:53,355 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ManagedBeanService': Completed reload and swapped in latest configuration for service 'shibboleth.ManagedBeanService'<br>2024-02-07 15:58:53,355 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ManagedBeanService': Reload complete<br>2024-02-07 15:58:53,356 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ManagedBeanService': Reload interval set to: PT15M, starting refresh thread<br>2024-02-07 15:58:53,562 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:55] - Shibboleth IdP Version 4.3.1<br>2024-02-07 15:58:53,563 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:56] - Java version='11.0.21' vendor='Red Hat, Inc.'<br>2024-02-07 15:58:53,564 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] - No Plugins Loaded<br>2024-02-07 15:58:53,578 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:100] - Enabled Modules:<br>2024-02-07 15:58:53,578 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Password Authentication<br>2024-02-07 15:58:53,579 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Hello World<br>2024-02-07 15:58:54,553 - - INFO [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:214] - RemoteUserAuthServlet will process REMOTE_USER, along with attributes [] and headers []<br>2024-02-07 15:58:57,694 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'<br>2024-02-07 15:58:57,695 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T17:58:57.403424Z' ('2024-02-07T18:58:57.403424+01:00[Europe/Paris]' local time)<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div> <!--StartFragment--><pre>----------------
attributes_sent_by_idp
urn:oid:2.5.4.4
0: "izoret"
urn:oid:2.5.4.42
0 "philippe"
urn:oid:1.3.6.1.1.1.1.1:
0 "25501"
upn_sent_by_idp : "AAdzZWNyZXQxZeIj7ngxkWk5Tj4m3bop3J9JiSA+Z3DytGzRR4ETuJVZB2h2AsfLXU31s+sl9+tcytAvR+PDBoGQ+TWFFnYDRfxUV3+BnnjBL85/Z0MhMOMMT0JYSuKXEVolm3rboSS5n1XRACMzbhaNKWZEFGzfHBWxxkA6w=="
lockself_errors
0: "'firstname' variable is required"
1: "'lastname' variable is required"
2: "'mail' variable is required. Can be skip if 'upn' is sent"
3: "'groups' variable is missing. Maybe you doesn't want to use it" </pre><!--EndFragment--> </div><div>-----------<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Wich logs can i give you .. Sp Logs ? IDP Logs ?<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Regards,<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Philippe.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Nate Klingenstein" <ndk@sudonym.me><br><b>À: </b>"Shib Users" <users@shibboleth.net><br><b>Envoyé: </b>Mercredi 7 Février 2024 15:32:10<br><b>Objet: </b>Re: Ignoring NameIDFormat metadata that includes the 'unspecified' format<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><span style="color:rgb( 0 , 0 , 0 )">Philippe,</span><div><br><blockquote style="color:rgb( 0 , 0 , 0 )"><div style="font-family:'arial' , 'helvetica' , sans-serif;font-size:12pt"><div><div style="font-size:12pt"><div style="font-size:12pt"><span style="font-size:12pt">upn_sent_by_idp"AAdzZWNyZXQxZeIj7ngxkWk5Tj4m3bop3J9JiSA+Z3DytGzRR4ETuJVZB2h2AsfLXU31s+sl9+tcytAvR+PDBoGQ+TWFFnYDRfxUV3+BnnjBL85/Z0MhMOMMT0JYSuKXEVolm3rboSS5n1XRACMzbhaNKWZEFGzfHBWxxkA6w=="</span></div></div></div></div></blockquote><div style="color:rgb( 0 , 0 , 0 )"><br></div><div style="color:rgb( 0 , 0 , 0 )"><blockquote><div style="font-family:'arial' , 'helvetica' , sans-serif;font-size:12pt"><div><div style="font-size:12pt">IDP seems doing the job, but not the SP. <br></div></div></div></blockquote><div><div style="font-family:'arial' , 'helvetica' , sans-serif;font-size:12pt"><div><div style="font-size:12pt"><br></div></div></div></div></div><div style="color:rgb( 0 , 0 , 0 )">This is indicative of the IdP sending a transientID rather than an unspecified ID, so I think the problem remains on your end for now.</div><div style="color:rgb( 0 , 0 , 0 )"><br></div><div style="color:rgb( 0 , 0 , 0 )">First, you’ll need an unspecified NameID defined to release. This is done in same-nameid.xml, but it references attributes defined in the attribute resolver.</div><div style="color:rgb( 0 , 0 , 0 )"><br></div><div style="color:rgb( 0 , 0 , 0 )"><div class="apple-rich-link" style="display:inline-block"></div></div><div><a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#General-Procedure" target="_blank" rel="nofollow noopener noreferrer">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#General-Procedure</a><font color="#000000"></font></div><div style="color:rgb( 0 , 0 , 0 )"><br></div><div style="color:rgb( 0 , 0 , 0 )">Then, you need the override in place. That may or may not be there; we can’t tell without seeing your logs.</div><div style="color:rgb( 0 , 0 , 0 )"><br></div><div style="color:rgb( 0 , 0 , 0 )">Hope this helps,</div><div style="color:rgb( 0 , 0 , 0 )">Nate</div></div><br>-- <br>For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div></div></body></html>