Multi-valued attributes - some values not encoded by IdP?

Chad La Joie lajoie at itumi.biz
Sun Aug 14 12:22:27 BST 2011


It's an issue only if the application has a bug in it.  Some people
had assumed that the IdP (or SP) would dedupe attribute values.  The
IdP used to but it was actually a side effect of a bug that was fixed
in v2.3.0.  In the next patch level of the IdP I *may* re-add the
functionality but as was noted multiple times in the associated
thread, *nothing* guarantees or requires dedupe'ing of values.  So if
an application breaks when encountering duplicate values then it has a
bug and needs to be fixed.

On Sat, Aug 13, 2011 at 12:38, Phil Chapman <phil at atomwide.com> wrote:
> Scott's email seemed to imply that when the bug that I've experienced in v2.3.2 was fixed, a new issue was introduced.  I don't know what this issue might be.
>
> Phil.
>
>> -----Original Message-----
>> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>> On Behalf Of Chad La Joie
>> Sent: 13 August 2011 14:12
>> To: Shib Users
>> Subject: Re: Multi-valued attributes - some values not encoded by IdP?
>>
>> What issue?
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>>
>> On Aug 13, 2011, at 4:22 AM, Phil Chapman wrote:
>>
>> > Thanks Scott.  I'd missed the announcement of v2.3.3 as I hadn't updated
>> my mail filter rules for the new @shibboleth.net addresses.  Apologies for
>> wasting everyone's time.
>> >
>> > Is a v2.3.4 imminent to resolve the "additional duplication issues"?
>> >
>> > Phil.
>> >
>> >> -----Original Message-----
>> >> From: users-bounces at shibboleth.net
>> >> [mailto:users-bounces at shibboleth.net]
>> >> On Behalf Of Cantor, Scott E.
>> >> Sent: 12 August 2011 23:27
>> >> To: users at shibboleth.net
>> >> Subject: Re: Multi-valued attributes - some values not encoded by IdP?
>> >>
>> >> On 8/12/11 6:22 PM, "Phil Chapman" <phil at atomwide.com> wrote:
>> >>>
>> >>> Just a thought: is it possible that values 2 and 3 are eliminated
>> >>> because the bit before the scope is the same for all three values?
>> >>
>> >> Yes, that's the bug that was fixed in 2.3.3, at the cost of causing
>> >> some additional duplication issues.
>> >>
>> >> -- Scott
>> >>
>> >> --
>> >> To unsubscribe from this list send an email to users-
>> >> unsubscribe at shibboleth.net
>> > --
>> > To unsubscribe from this list send an email to
>> > users-unsubscribe at shibboleth.net
>>
>> --
>> To unsubscribe from this list send an email to users-
>> unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered


More information about the users mailing list