filter warning: Ignoring targeted attribute [...] applying to actual attribute

[Cantor, Scott]

On 12/3/14, 8:41 PM, "Paul B. Henson" <henson at csupomona.edu> wrote:

>I recently upgraded my idp to the latest version, and am seeing a new 
>warning I've never seen before:
>
>WARN 
>[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.m
>atch.basic.AbstractAttributeTargetedStringMatchFunctor:71] - Ignoring 
>targeted attribute 'eduPersonEntitlement' in permit/deny rule, applying 
>to actual attribute 'eduPersonEntitlement'
>
>The configuration is basically identical other than changing the xml 
>parser class... As far as I can tell, everything is still functioning 
>correctly. Unless I'm missing something, the "targeted" attribute and the 
>"actual" attribute listed in the warning are identical?

Yes, which means you have an AttributeRule against eduPersonEntitlement 
and inside that there's some kind of permit/deny rule with an attributeId 
set. That doesn't work, and it never did, so the warning was added to 
highlight that. In this case, it's superfluous, in a different case, it's 
potentially not working the way somebody thought it did.

The only time the attributeId can be specified like that and not get an 
anomalous result is if it's in a PolicyRequirementRule.

-- Scott