ResultCache values not reflecting LDAP values

[David Bantz]

On Wed, 9 Jul 2014, at 11:05 , Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/9/14, 2:59 PM, "David Bantz" <dabantz at alaska.edu> wrote:
> 
>>    <Script>
>>       <![CDATA[
>> 
>> importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribut
>> e.provider);
>>       importPackage(Packages.org.slf4j);
>>       if (eduPersonAffiliation == null) {eduPersonAffiliation = new
>> BasicAttribute("eduPersonAffiliation");}
>>       ]]>
>>   </Script>
> 
> I suppose in theory that might work, but I really don't think you want to
> be naming things like that. I would fork the naming so that you have more
> clarity and no chance of some kind of weird side effect.
> Also, I don't think that script is doing anything, is it? It's generating
> an empty attribute with no values.

If there is in fact no attribute value of ePA in the LDAP directory,
without that script ePA is undefined, the attributes that depend on ePA fail, 
abort the entire attribute resolution, and no attributes at all are encoded.
(I verified that the hard way.)

I’m sorry I don’t understand what “fork the naming” operationally means.

David


> If you want to expose the underlying
> attribute from LDAP, just use a Simple definition, but I'm not sure why
> you'd need that anyway, whatever's sitting on top of it should be able to
> consume the data connector's output.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140709/daec043f/attachment.bin