Problem sending email address as NameID in subject

[Andrew Morgan]

On Mon, 19 Jan 2015, Andrew Cheung wrote:

> Hi. I have problems sending the email address as NameID in the subject. (I
> use Novell eDirectory as the datastore and access it using LDAP).
>
> Any help is appreciated.
>
> Here is my configuration :
>
> Shibboleth version : 2.4.3
>
> attribute-filter.xml :
>
> <afp:AttributeFilterPolicy id="releaseGoogleMySiteAEmail">
>  <afp:PolicyRequirementRule xsi:type="basic:NOT">
>     <basic:Rule xsi:type="basic:AttributeRequesterString" value="
> https://google.com/a/dev.mysiteA.ca"/>
>  </afp:PolicyRequirementRule>
>  <afp:AttributeRule attributeID="GoogleMySiteAEmail">
>    <afp:PermitValueRule xsi:type="basic:ANY" />
>  </afp:AttributeRule>
> </afp:AttributeFilterPolicy>

Do you really want the NOT rule in this?  I think you want:

<afp:AttributeFilterPolicy id="releaseGoogleMySiteAEmail">
   <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://google.com/a/dev.mysiteA.ca"/>
   <afp:AttributeRule attributeID="GoogleMySiteAEmail">
     <afp:PermitValueRule xsi:type="basic:ANY" />
   </afp:AttributeRule>
</afp:AttributeFilterPolicy>

 	Andy