Re: [Unity-idm-discuss] Output profile fails to create new attribute(s)

[Shiraz M. <a....@fz...>]

Hi,

Finally I have managed to get it working by adding "unity:persistent" attribute (and others) through attribute types management. This behavior is however neither expected as unity used to create the attributes dynamically upon release, which are defined under the output translation profiles with action "createAttribute".

By the way, the "urn:oid:1.3.6.1.4.1.5923.1.1.1.13" attribute (in my previous email) was not causing the "attribute does not exist" error, the reason being is the attribute has not been defined in any of the oauth scopes. However the same error occurred after declaring the attribute inside the scopes. Having said that, is it a new feature in v2.1.0 that all the attributes unity releases to the oauth clients should be predefined in the attribute schema?

Cheers,
Shiraz

On Mon, Aug 7, 2017 at 1:58 PM, Shiraz Memon <a....@fz...<mailto:a....@fz...>> wrote:
Hi,

After successfully upgrading to v2.1.0, unity fails to create new attribute(s), which is being defined in the output translation profile.

2017-08-07T13:44:41,202 [qtp35624804-191] DEBUG unity.server.externaltranslation.CreateAttributeAction: [[TrProfile oauth], [r: 7], [certclient - eId: 139]]Created a new attribute: unity:persistent: [42ef9e66-cc26-49ac-a21e-1f789ab4e1a4] with meta [Persistent Unique Iden
tifier, EUDAT Persistent Unique Identifier, false]
2017-08-07T13:44:41,203 [qtp35624804-191] ERROR unity.server.oauth.OAuthAuthzUI: Engine problem when handling client request
java.lang.IllegalArgumentException: attribute type [unity:persistent] does not exist
       at pl.edu.icm.unity.store.rdbms.GenericNamedRDBMSCRUD.get(GenericNamedRDBMSCRUD.java:97) ~[unity-server-storage-2.2.0-SNAPSHOT.jar:?]
       at pl.edu.icm.unity.engine.attribute.AttributeTypeHelper.getTypeForAttributeName(AttributeTypeHelper.java:56) ~[unity-server-engine-2.1.0.jar:?]
       at pl.edu.icm.unity.engine.attribute.AttributeTypeSupportImpl.getType(AttributeTypeSupportImpl.java:46) ~[unity-server-engine-2.1.0.jar:?]
       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_72-internal]
       at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_72-internal]
       at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_72-internal]
       at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_72-internal]
       at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at pl.edu.icm.unity.store.rdbms.tx.SQLTransactionEngine.runInTransaction(SQLTransactionEngine.java:45) ~[unity-server-storage-2.2.0-SNAPSHOT.jar:?]
       at pl.edu.icm.unity.store.tx.TransactionalAspect.retryIfNeeded4Class(TransactionalAspect.java:67) ~[unity-server-storage-2.2.0-SNAPSHOT.jar:?]
       at sun.reflect.GeneratedMethodAccessor129.invoke(Unknown Source) ~[?:?]
       at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_72-internal]
       at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_72-internal]
       at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:629) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:618) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:70) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:168) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213) ~[spring-aop-4.3.10.RELEASE.jar:4.3.10.RELEASE]
       at com.sun.proxy.$Proxy61.getType(Unknown Source) ~[?:?]
       at pl.edu.icm.unity.webui.idpcommon.ExposedAttributesComponent.getAttributeComponent(ExposedAttributesComponent.java:123) ~[unity-server-web-common-2.1.0.jar:?]
       at pl.edu.icm.unity.webui.idpcommon.ExposedAttributesComponent.getAttributesListComponent(ExposedAttributesComponent.java:114) ~[unity-server-web-common-2.1.0.jar:?]

snapshot of the rule
[Inline image 4]
Surprisingly, following rule works
[Inline image 2]

and corresponding log entry (upon creating the attribute)
2017-08-07T13:54:38,322 [qtp35624804-194] DEBUG unity.server.externaltranslation.OutputTranslationRule: [[TrProfile oauth], [r: 5]]Condition OK
2017-08-07T13:54:38,322 [qtp35624804-194] DEBUG unity.server.externaltranslation.CreateAttributeAction: [[TrProfile oauth], [r: 5], [certclient - eId: 139]]Created a new attribut
e: urn:oid:1.3.6.1.4.1.5923.1.1.1.13: [42e...@eu...<mailto:42e...@eu...>] with meta [eduPersonUniqueId, eduPersonUniqueId, false]

Do you how to resolve this?

Thanks,
Shiraz
--
Shiraz Memon
Federated Systems and Data
Jülich Supercomputing Centre (JSC)

Phone: +49 2461 61 6899<tel:02461%20616899>
Fax:     +49 2461 61 6656<tel:02461%20616656>



--
Shiraz Memon
Federated Systems and Data
Jülich Supercomputing Centre (JSC)

Phone: +49 2461 61 6899
Fax:     +49 2461 61 6656


------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------