Continuing Attribute release problems
Michael Dahlberg
olgamirth at gmail.com
Mon Aug 17 13:19:33 EDT 2015
On Mon, Aug 17, 2015 at 1:11 PM, Andrew Morgan <morgan at orst.edu> wrote:
> On Mon, 17 Aug 2015, Michael Dahlberg wrote:
>
> I'm continuing to have attribute release problems. Maybe a second (or
>> third) pair of eyes on my config will indicate my error.
>>
>> The relevant part of my attribute-filter.xml file is listed below:
>>
>> <afp:AttributeFilterPolicy>
>> <afp:PolicyRequirementRule xsi:type="basic:OR">
>> <basic:Rule xsi:type="basic:AttributeRequesterString" value="
>> https://adminuat.dc4.pageuppeople.com/" />
>> <basic:Rule xsi:type="basic:AttributeRequesterString" value="
>> https://admin.dc4.pageuppeople.com/" />
>> </afp:PolicyRequirementRule>
>> <afp:AttributeRule attributeID="WindowsDomainQualifiedName">
>> <afp:PermitValueRule xsi:type="basic:ANY" />
>> </afp:AttributeRule>
>> </afp:AttributeFilterPolicy>
>>
>
> Doesn't each AttributeFilterPolicy need an id?
>
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttributeFilter
>
>
My guess is no. That wiki page doesn't state that an id is mandatory and
I've got my AttributeFilterPolicy's grouped together according to common
SPs and none have an id tag ... although that could be one more thing I'm
doing wrong.
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150817/3bfcec83/attachment.html>
More information about the users
mailing list