Uploaded image for project: 'Identity Provider'
  1. Identity Provider
  2. IDP-794

error from resolving eduPersonScopedAffiliation in IDP 3.1.2

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.2.0
    • Component/s: Attribute Resolver
    • Labels:
      None
    • Environment:

      IDP 3.1.2

      Description

      Hi,

      We are running IDP 3.1.2 in our test environment. When user’s eduPersonAffiliaiton is empty, attribute resolver generated error when trying to resolve eduPersonScopedAffiliation. The error caused none of the attribute/value is released to the SP. This behavior is different than IDP 2.4.x.

      2015-08-17 10:52:11,480 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:256] - Profile Action ResolveAttributes: Error resolving attributes
      net.shibboleth.idp.attribute.resolver.ResolutionException: net.shibboleth.idp.attribute.UnsupportedAttributeTypeException: Attribute Definition 'eduPersonScopedAffiliation':This attribute definition only supports attribute value types of net.shibboleth.idp.attribute.StringAttributeValue not values of type net.shibboleth.idp.attribute.EmptyAttributeValue
      at net.shibboleth.idp.attribute.resolver.ad.impl.ScopedAttributeDefinition.doAttributeDefinitionResolve(ScopedAttributeDefinition.java:91)
      Caused by: net.shibboleth.idp.attribute.UnsupportedAttributeTypeException: Attribute Definition 'eduPersonScopedAffiliation':This attribute definition only supports attribute value types of net.shibboleth.idp.attribute.StringAttributeValue not values of type net.shibboleth.idp.attribute.EmptyAttributeValue
      at net.shibboleth.idp.attribute.resolver.ad.impl.ScopedAttributeDefinition.doAttributeDefinitionResolve(ScopedAttributeDefinition.java:91)

      <resolver:AttributeDefinition id="eduPersonScopedAffiliation"
      xsi:type="ad:Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
      scope="%

      {idp.scope}

      " sourceAttributeID="eduPersonAffiliation">

      <resolver:Dependency ref="myLDAP" />

      <resolver:AttributeEncoder xsi:type="SAML1String"
      xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
      name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" encodeType="false" />

      <resolver:AttributeEncoder xsi:type="SAML2String"
      xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
      name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
      friendlyName="eduPersonScopedAffiliation" encodeType="false" />

      </resolver:AttributeDefinition>

      Thanks
      Hong

        Attachments

          Activity

            People

            Assignee:
            rdw@iay.org.uk Rod Widdowson
            Reporter:
            hy93@cornell.edu Hong Ye
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 3 hours
                3h