scripted attribute definition: non-JavaScript/non-Rhino ?

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2012-02-10 18:59]:
> it ends up with a "null attribute" and resolving of all attributes fails:
> 
>   18:36:20.731 - ERROR
>   [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition:129]
>   - attributeId produced a null attribute
> 
>   18:36:20.731 - WARN
>   [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:478]
>   - Error resolving attributes for principal 'someuser'.  No name
>   identifier or attribute statement will be included in response
> 
> Logging values of eduPersonEntitlement.getValues() shows everything as
> intended until the script finishes.
> 
> I'll probbaly end up rewriting the darn thing for Rhino (making use of
> org.joda.time which I just noticed was included, for those age
> calculations) but thought I'd still ask here.

Now that I did just that (replacing Jython with the IdP default
JSR-223 implementation Rhino) the result is exactly the same and I'm
still producing a "null attribute" and resolving of all other
attributes then fails for a given principal.

I'm doing nothing special, just using (or creating) an attribute and
adding a single value via foo.getValues().add("bar"). Same as in
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples#ResolverScriptAttributeDefinitionExamples-ex3

Any suggestions, other than posting the complete script or opening an
issue? IdP version is current (2.3.5).
-peter