operational ldap attributes shib idp 3.x

[Raffael Sahli]

Hi

How can I include operational attributes from ldap?
It seems like this doesn't work anymore since 3.x.


2015-04-09 10:50:24,544 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:352] -
Attribute Resolver 'ShibbolethAttributeResolver': Resolving dependencies
for 'memberOf'
2015-04-09 10:50:24,544 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:368] -
Attribute Resolver 'ShibbolethAttributeResolver': Finished resolving
dependencies for memberOf
2015-04-09 10:50:24,545 - DEBUG
[net.shibboleth.idp.attribute.resolver.AbstractAttributeDefinition:245]
- Attribute Definition 'memberOf': produced an attribute with no values
2015-04-09 10:50:24,546 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:271] -
Attribute Resolver 'ShibbolethAttributeResolver': Attribute definition
'memberOf' produced an attribute with 0 values
2015-04-09 10:50:24,556 - DEBUG
[net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:406] -
Attribute Resolver 'ShibbolethAttributeResolver': Removing result of
attribute definition 'memberOf', contains no values


ldap.properties contains:
idp.authn.LDAP.returnAttributes  = *

I have changed it into:
idp.authn.LDAP.returnAttributes = *,memberOf


But this did not helped.
The ldap search is correctly, but there is no attribute meberOf in the
response (Same problem with other operational attributes like
createTimestamp)

2015-04-09 10:55:12,852 - DEBUG [org.ldaptive.auth.Authenticator:284] -
**SNIP**:user=***, retAttrs=[*, memberOf]]


And another question, does "dp.authn.LDAP.returnAttributes" actually do
anything? If I just configure one single attribute,
alle my configured attributes actually do get values, even if their are
not in the "idp.authn.LDAP.returnAttributes" list.


Thanks