IdPFilterRequirementScript always returns true

[Sara Hopkins]

Many thanks Brent for this and your earlier reply. I've done some 
experimentation along the lines you suggest, and it appears that both 
attributeId and attributeValue indeed are null, and so the conditionals 
(or at least, the first of them) are responsible for the return value of 
"true". So why would they be null?

The documentation says "the ID of the attribute currently being 
evaluated is bound to a script attribute called attributeId, the current 
attribute value being evaluated is bound to a script attribute called 
attributeValue". I'm not sure what this means. Is it referring to the 
"uid" attribute in my example? Why would attributeId and attributeValue 
be null? There is an attribute called "uid" in my LDAP.

If I remove the two "if statements" from the script then I get a WARN 
message in the log:

16:52:38.439 - WARN 
[edu.internet2.middleware.shibboleth.idp.profile.saml1.AbstractSAML1ProfileHandler:483] 
- Error resolving attributes for principal 'shopkins'.  No name 
identifier or attribute statement will be included in response

I guess that's consistent with it trying to "get" a null attribute, but 
I still don't see why it would be null.

Cheers,

Sara


On 27/02/2012 19:23, Brent Putman wrote:
>
>
> On 2/27/12 12:17 PM, Sara Hopkins wrote:
>>                          if (attributeId == null) return true;
>>                          if (attributeValue == null) return true;
>
>
> Per my previous note, the way the example documents accessing attribute
> values from the attribute context is wrong, but I also don't see why
> that would cause you to get a true instead of a false. Not to overlook
> the obvious,  it may be that the 2 conditionals above are responsible
> for the true value.  Perhaps there is some other reason why those would
> be null in some cases.  Try experimenting there to see if that is the case.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

-- 
Sara Hopkins
Support Team
UK Access Management Federation for Education and Research
web:    http://www.ukfederation.org.uk/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.