null value of eduPersonAffiliation

Cantor, Scott cantor.2 at osu.edu
Thu Dec 5 14:00:36 EST 2013


On 12/5/13, 1:35 PM, "David Bantz" <dabantz at alaska.edu> wrote:

>For a person with no eduPersonAffiliation, my script in the attribute
>resolver [which otherwise works to clean up some issues with source
>directory values] errs as follows:
>
>
>16:16:57.758 - ERROR
>[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.at
>tributeDefinition.ScriptedAttributeDefinition:129] - eduPersonAffiliation
>produced a null attribute

Rightly or wrongly, I think the script plugin expects/requires a
BasicAttribute to be produced as output, even if it has no values itself.
I think that's the null it's talking about.

>Is a  ³null attribute² different from an attribute with null value?

Yes, it's a null pointer in the Java coming out of the script.

We don't in general handle null values in attributes at all. SAML
technically can, but it's really just not done. If you have no value, you
don't send it, we don't encourage the idea of distinguishing between "no
values" and "a value of nil".

-- Scott




More information about the users mailing list