double attribute values

[Martin Haase]

Hi Chad,

I get double attribute values for eduPersonAffiliation out of the IdP
2.3.3, both in the SAML response and at the SP it yields:
"student;member;student;member".

In the attribute resolver I have this:

    <resolver:AttributeDefinition id="eduPersonAffiliation"
xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
        sourceAttributeID="eduPersonAffiliation">
        <resolver:Dependency ref="IdMLDAP" /> <!-- "student" is in LDAP -->
        <resolver:Dependency ref="staticAttributes" />

and

    <resolver:DataConnector id="staticAttributes" xsi:type="Static"
xmlns="urn:mace:shibboleth:2.0:resolver:dc">
        <Attribute id="eduPersonAffiliation">
            <Value>member</Value>
        </Attribute>

So you see, "student" comes from LDAP while "member" is static. Is this
doubling expected behaviour using this config? What would I need to do
to suppress this? I found that giving the attribute definition another
id (e.g. eduPersonAffiliationWire) is a workaround. But then uApprove
would show that as well, which I do not want, I'd like the canonical name.

Cheers,
Martin

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2320 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20111017/bbee83b8/attachment.bin