IdPFilterRequirementScript always returns true

[Brent Putman]

On 2/28/12 12:55 PM, Brent Putman wrote:
>> If I remove the two "if statements" from the script then I get a WARN 
>> message in the log:
>>
>> 16:52:38.439 - WARN 
>> [edu.internet2.middleware.shibboleth.idp.profile.saml1.AbstractSAML1ProfileHandler:483] 
>> - Error resolving attributes for principal 'shopkins'.  No name 
>> identifier or attribute statement will be included in response
>>
>> I guess that's consistent with it trying to "get" a null attribute, but 
>> I still don't see why it would be null.
> Yeah, not sure about that probably some other subtle syntactic error you
> introduced. I don't think that the script should error out because the
> conditionals are taken out.  They are completely unrelated to whatever
> you are doing by accessing things from the filter context.


I meant to also ask whether there were any entries in the log prior to
this.  This is just the profile handler reporting that the attribute
resolver didn't return any attributes.  I imagine there's probably some
detail earlier in the log as to why the resolver failed.  Might also try
turning up the log level to DEBUG to see if you get anything there.