Attribute Resolver (ServiceException): v2 to v3 Migration

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Attribute Resolver (ServiceException): v2 to v3 Migration

Lionel Samuel
We are helping one of our units migrate from IdP v2 to v3.

Trying to simplify the attribute-reolver.xml when addind new; but still keeping the old.

When adding the new world -- the following exception was received -- did we miss something in the schema path (listed at email's tail-end).


<AttributeDefinition xsi:type="ad:Simple" id="mobileNumber" sourceAttributeID="giveName">
            <Dependency ref="givenName" />
            <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" />
        </AttributeDefinition>

LOG extract:

net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element 'AttributeDefinition'. One of '{"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector}' is expected.
    at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:336)
Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element 'AttributeDefinition'. One of '{"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector}' is expected.
    at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)
Caused by: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found starting with element 'AttributeDefinition'. One of '{"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector}' is expected.


Schema path:

<resolver:AttributeResolver xmlns:resolver="urn:mace:shibboleth:2.0:resolver" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                            xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc" xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad"
                            xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc" xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder"
                            xmlns:sec="urn:mace:shibboleth:2.0:security"
                            xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd
                                               urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd
                                               urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd
                                               urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd
                                               urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd
                                               urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd">

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: Attribute Resolver (ServiceException): v2 to v3 Migration

Nate Klingenstein-4

Lionel,

You just forgot to remove the xsi:type from the AttributeDefinition itself too, which is causing all kinds of subsequent parsing errors that you're enjoying below.

Hope this helps,
Nate.
 
-----Original message-----

> From: Lionel Samuel
> Sent: Wednesday, July 4 2018, 4:57 pm
> To: Shib Users
> Subject: Attribute Resolver (ServiceException): v2 to v3 Migration
>
>
>
> We are helping one of our units migrate from IdP v2 to v3.
>
> Trying to simplify the attribute-reolver.xml when addind new; but still keeping the old.
>
> When adding the new world -- the following exception was received -- did we miss something in the schema path (listed at emails tail-end).
>
> <AttributeDefinition xsi:type="ad:Simple" id="mobileNumber" sourceAttributeID="giveName">
>             <Dependency ref="givenName" />
>             <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" />
>         </AttributeDefinition>
>
> LOG extract:
>
> net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>     at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:336)
> Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>     at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)
> Caused by: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>
> Schema path:
>
> <resolver:AttributeResolver xmlns:resolver="urn:mace:shibboleth:2.0:resolver" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance <http://www.w3.org/2001/XMLSchema-instance>"
>                             xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc" xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad"
>                             xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc" xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder"
>                             xmlns:sec="urn:mace:shibboleth:2.0:security"
>                             xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd
>                                                urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd
>                                                urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd
>                                                urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd
>                                                urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd
>                                                urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd">
>
> --
>
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
>
> To unsubscribe from this list send an email to [hidden email]
>
>
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: Attribute Resolver (ServiceException): v2 to v3 Migration

Nate Klingenstein-4
In reply to this post by Lionel Samuel
I'm sorry.  I didn't fully read your message before responding because I wanted to get you a quick answer.

You're indeed missing the schema locations and definitions for the new, simplified configuration that I referenced originally, part of the v3.3 upgrade.

https://issues.shibboleth.net/jira/browse/IDP-813

Somehow, you seem to have gotten a configuration snippet for a v3.3+ IdP and you are missing the declarations.  I'd just copy the complete schema path out of the 3.3.x distribution and use it.

Thanks for your understanding,
Nate.
 
-----Original message-----

> From: Lionel Samuel
> Sent: Wednesday, July 4 2018, 4:57 pm
> To: Shib Users
> Subject: Attribute Resolver (ServiceException): v2 to v3 Migration
>
>
>
> We are helping one of our units migrate from IdP v2 to v3.
>
> Trying to simplify the attribute-reolver.xml when addind new; but still keeping the old.
>
> When adding the new world -- the following exception was received -- did we miss something in the schema path (listed at emails tail-end).
>
> <AttributeDefinition xsi:type="ad:Simple" id="mobileNumber" sourceAttributeID="giveName">
>             <Dependency ref="givenName" />
>             <AttributeEncoder xsi:type="SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" />
>         </AttributeDefinition>
>
> LOG extract:
>
> net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>     at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:336)
> Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 38 in XML document from net.shibboleth.ext.spring.resource.FileBackedHTTPResource@55b99e42 is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 96; cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>     at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)
> Caused by: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found starting with element AttributeDefinition. One of {"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector, "urn:mace:shibboleth:2.0:resolver":PrincipalConnector} is expected.
>
> Schema path:
>
> <resolver:AttributeResolver xmlns:resolver="urn:mace:shibboleth:2.0:resolver" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance <http://www.w3.org/2001/XMLSchema-instance>"
>                             xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc" xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad"
>                             xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc" xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder"
>                             xmlns:sec="urn:mace:shibboleth:2.0:security"
>                             xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd
>                                                urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd
>                                                urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd
>                                                urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd
>                                                urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd
>                                                urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd">
>
> --
>
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
>
> To unsubscribe from this list send an email to [hidden email]
>
>
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]