Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Problem with configuration of Grouper Plugin for Shibboleth

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Problem with configuration of Grouper Plugin for Shibboleth


Chronological Thread 
  • From: "Jie Lv" <>
  • To: "'Tom Zeller'" <>
  • Cc: <>
  • Subject: RE: [grouper-users] Problem with configuration of Grouper Plugin for Shibboleth
  • Date: Thu, 13 Oct 2011 14:04:32 +0800

Hi,
I've figured out why GrouperDataConnector seemed to be doing its job
correctly, but no attribute was passed by IdP to SP.

Previously, my configuration was:
<resolver:DataConnector id="MemberDataConnector2"
xsi:type="grouper:MemberDataConnector">
<grouper:Attribute id="groups" source="example"/>
</resolver:DataConnector>
<resolver:AttributeDefinition id="isMemberOf" xsi:type="grouper:Group"
sourceAttributeID="groups" >
<resolver:Dependency ref="MemberDataConnector2" />
<grouper:Attribute id="name" />
</resolver:AttributeDefinition>

After I added the AttributeEncoder into the AttributeDefinition, I could see
the attribute statement in SP. The Grouper Plugin now works well.

<resolver:DataConnector id="MemberDataConnector2"
xsi:type="grouper:MemberDataConnector">
<grouper:Attribute id="groups" />
</resolver:DataConnector>
<resolver:AttributeDefinition id="isMemberOf" xsi:type="grouper:Group"
sourceAttributeID="groups" >
<resolver:Dependency ref="MemberDataConnector2" />
<resolver:AttributeEncoder xsi:type="SAML1String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="isMemberOf" />
<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="isMemberOf" friendlyName="isMemberOf" />
<grouper:Attribute id="name" />
</resolver:AttributeDefinition>

I wonder if you could add some note about this on the "Grouper and
Shibboleth Integration " page at
https://spaces.internet2.edu/display/Grouper/Grouper+and+Shibboleth+Integrat
ion

Thanks so much for your help!

By the way, even if the Grouper Plugin works well now, the aacli.sh script
still doesn't work.


Jie





Archive powered by MHonArc 2.6.16.

Top of Page