PolicyRequirementRule attribute "valve"
Cantor, Scott
cantor.2 at osu.edu
Thu Sep 12 02:26:48 EDT 2013
On 9/11/13 5:32 PM, "Tom Poage" <tfpoage at ucdavis.edu> wrote:
>
>The following does not work, though I expect it would ("." being a valid
>regex), unless there's an implicit anchor (various wiki examples show
>explicit regex anchoring, e.g.
>https://wiki.shibboleth.net/confluence/x/EoFC)
Doesn't appear to be anything implicit in the code. I don't know why it
wouldn't work.
>Is there a usable attribute-exists (and I don't care what the value is)
>type of test that can be performed here (other than the regex)?
There's one based on the number of values that appears to not be
documented. The schema type is basic:NumberOfAttributeValues and it has
minimum and maximum attributes for setting the boundaries to check.
I know Rod found a number of issues with the V2 filtering code so it may
not be implemented or the configuration logic may have issues, but the
function is in the code at least.
-- Scott
More information about the users
mailing list