Multi valued attribute separator.

[Armando Martins]

Hi all,

I would like to know if it's possible to configure the separator for multi
valued attributes like MemberOf.

I'm trying to configure rules on juniper but when i see in my juniper debug
log the MemberOf attribute supplied by shibboleth idp look like this :
MemberOf = "group1 group2 group3"

So my rule userAttr.MemberOf = "group1" don't match. i have to put this
rule   userAttr.MemberOf = "*group1*"

The problem is that the wildcard is not suitable for us.

When i test with an LDAP authtification on juniper, my MemberOf attribute
look like this : MemberOf = "group1"; group2"; "group3"

in this form my rule userAttr.MemberOf = "group1" match perfectly.

Any help will be really appreciated

Thanks

-- 
Armando Martins
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150116/24bdde39/attachment.html