Shibboleth Developers

["Yifan (Eric) Jiang" <>]

Hi Nate,

 

Thank you very much for your quick respond.

 

I’ve solved last problem, but there is a new problem:

 

 

16:40:33.734 INFO [Shibboleth-Access] 20071203T034033Z|130.216.189.43|kilrogg.auckland.ac.nz:8443|/profile/saml1/SOAP/AttributeQuery|

 

16:40:33.749 ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml1.AbstractSAML1ProfileHandler] Error resolving attributes for SAML request from relying party urn:mace:federation.org.au:bestgrid.org

edu.internet2.middleware.shibboleth.common.attribute.resolver.AttributeResolutionException: No principal connector available to resolve a subject name with format urn:mace:shibboleth:1.0:nameIdentifier for relying party urn:mace:federation.org.au:bestgrid.org

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolvePrincipalName(ShibbolethAttributeResolver.java:212)

        at edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML1AttributeAuthority.getPrincipal(ShibbolethSAML1AttributeAuthority.java:140)

        at edu.internet2.middleware.shibboleth.idp.profile.saml1.AbstractSAML1ProfileHandler.resolvePrincipal(AbstractSAML1ProfileHandler.java:564)

        at edu.internet2.middleware.shibboleth.idp.profile.saml1.AttributeQueryProfileHandler.processRequest(AttributeQueryProfileHandler.java:87)

        at edu.internet2.middleware.shibboleth.idp.profile.saml1.AttributeQueryProfileHandler.processRequest(AttributeQueryProfileHandler.java:52)

        at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:74)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)

        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)

        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)

        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)

        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)

        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)

        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)

        at java.lang.Thread.run(Thread.java:595)

 

Thanks

 

Eric

 

---

From: Nate Klingenstein [mailto:]
Sent: Monday, 3 December 2007 4:19 p.m.
To:
Subject: Re: SAML attribute query exception

 

Eric,

 

This is probably a problem with your handler.xml file and your metadata.  If your configuration is like the default in the trunk, then your attribute query handler will be located at:

 

    

    <ProfileHandler xsi:type="SAML1AttributeQuery" 

                    inboundBinding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"

                    outboundBindingEnumeration="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding">

        <RequestPath>/saml1/SOAP/AttributeQuery</RequestPath>

    </ProfileHandler>

 

However, your metadata is probably pointing to https://yourhost.org/idpname/saml/SOAP/AttributeQuery.  You should modify one or the other.

 

Thanks,

Nate.

 

On 3 Dec 2007, at 02:42, Yifan (Eric) Jiang wrote:

15:29:25.559 WARN [edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet] No profile handler configured for request at path: /saml/SOAP/AttributeQuery