Multi valued attribute separator.

[Armando Martins]

In my case, the SP is the juniper SSL vpn and i can't find a good way to
match a valid group...

it seems that the juniper take the multi valued MemberOf returned by
shibboleth idp for a single group :/

Anyway, i will try to do some regex expression to match the group in
juniper.

Thanks a lot

2015-01-16 16:23 GMT+01:00 Cantor, Scott <cantor.2 at osu.edu>:

> > I would like to know if it's possible to configure the separator for
> multi valued
> > attributes like MemberOf.
>
> There is no separator. Multiple values are multiple values.
>
> > I'm trying to configure rules on juniper but when i see in my juniper
> debug
> > log the MemberOf attribute supplied by shibboleth idp look like this :
> > MemberOf = "group1 group2 group3"
>
> Not unless you make it do that in some weird way, or the values aren't
> separate in the first place. Multiple LDAP values are returned as multiple
> values and maintained as multiple values throughout.
>
> If you're talking about the SP, then that's something else entirely.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Armando Martins
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150116/339d6314/attachment.html