Oh, thanks Andy,
If I understand correctly, from the bug report Rod pointed out, this shouldn't work unless you have a specific Attribute Filter Policy for the SP you are testing - i.e. if you have a specific policy for "https://sh2testsp1.iay.org.uk/shibboleth" in this case, rather than relying on this SP as being identified as an Entity from the UK Fed metadata - is that the case? Are you seeing the full range of attributes that you would expect to see for a UK Fed SP?
If this is working for you, then there is something going on that I'm missing (wouldn't be the first time!) - have I misunderstood this bug? Are there circumstances in which aacli will successfully resolve attributes for an Entity that is part of an "AttributeRequesterInEntityGroup"?
Cheers,
Mike
Michael White
eLearning Developer
eLearning Liaison & Development (eLD)
3V3a, Cottrell
University of Stirling
Stirling SCOTLAND
FK9 4LA
Email: [log in to unmask]
Tel: +44 (0) 1786 466877
Fax: +44 (0) 1786 466880
http://www.is.stir.ac.uk/aboutis/teams/aldt/eld.php
-----Original Message-----
From: Discussion list for Shibboleth developments [mailto:[log in to unmask]] On Behalf Of Andy Swiffin
Sent: 22 April 2010 08:26
To: [log in to unmask]
Subject: Re: aacli.sh and Java Heap Space
>>> On 21/04/2010 at 16:59, in message
<[log in to unmask]>, Michael
White <[log in to unmask]> wrote:
> Does anyone have any thoughts or pointers as to what I'm missing? Are others
> using aacli.sh successfully against UK Federation SPs?
>
If it's any help, I changed your script to my idp and principal to me:
./aacli.sh --principal=alswiffin --configDir=../conf --requester=https://sh2testsp1.iay.org.uk/shibboleth --issuer=https://idp.dundee.ac.uk/shibboleth --saml1
and it worked. Last time I used it I'd run into an error before I upped the heap space which was a java exception rather than anything going into the logs. All I'd done to make it work was:
"$JAVACMD" '-Xmx128m' '-classpath' "$LOCALCLASSPATH" '-Djava.endorsed.dirs='"$LIBDIR/endorsed" 'edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCLI' "$@"
which is what ran here.
HTH
Andy
************************************************************
Please consider the environment. Do you really need to print this email?
The University of Dundee is a registered Scottish charity, No: SC015096
--
The Sunday Times Scottish University of the Year 2009/2010
The University of Stirling is a charity registered in Scotland,
number SC 011159.
|