ECMA to access SubjectCanonicalizationContext in Resolver

Cantor, Scott cantor.2 at osu.edu
Tue Nov 10 23:09:35 EST 2015


On 11/10/15, 10:59 PM, "dev on behalf of Michael A Grady" <dev-bounces at shibboleth.net on behalf of mgrady at unicon.net> wrote:



>When rawUsers had no values (I was only catching the fact that the subContext didn't exist, and putting a debug message to the log), I got the following error from the LDAP DC, which stopped any "normal" resolution from happening:

Oh, probably because the lower layer here is an attribute definition with a script so it must get created as an attribute with no values rather than nothing.

I guess worst case something like:

#if($rawUsername.size()>0)$rawUsername.get(0)#{else}dummyValue#end

But that's not appreciably better than just using the script to begin with.

Rod might have a view on whether it's possible to adjust the behavior of scripted attributes or connectors to not return anything with an empty value set (as distinct from empty values).

I guess there's Failover as an option also.

-- Scott



More information about the dev mailing list