NOT release rule to set of SPs

[Peter Schober]

* Qian, Yi <yqian at ku.edu> [2013-07-12 05:56]:
> I tried several different ways, (with AND, NOT for every SP), none
> of them works. Apparently my google skill is not good either, the
> results of google did not really help

The documentation states that NOT can only contain one Rule element:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPFilterRequirementNOT

Directly combining several basic:AttributeRequesterString type rules
with AND will never match as there will only ever be one requestor in
the authN request.

To rule out several requestors wrap them into an OR rule first:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPFilterRequirementOR
Essentially: NOT ( any of OR'ed set ).
-peter