Attribute-Filter AttributeValueRegex
Filipozzi, Luca
luca.filipozzi at ubc.ca
Sat Mar 28 01:30:22 EDT 2015
Hi,
Doesn't
<basic:Rule xsi:type="basic:OR">
want to be
<afp:PermitValueRule xsi:type="basic:OR">
?
--
Luca Filipozzi, UBC IT Enterprise Architecture
On 2015-03-27, 21:57, "Joshua Brodie" <josbrodie at gmail.com<mailto:josbrodie at gmail.com>> wrote:
Hi:
The following to attribute-filter.xml - but the error below was obtained on IdP - did I miss something obvious?
<afp:AttributeRule attributeID="eduPersonEntitlement">
<basic:Rule xsi:type="basic:OR">
<basic:Rule xsi:type="basic:AttributeValueRegex" regex="FOO" />
<basic:Rule xsi:type="basic:AttributeValueRegex" regex="BAR" />
</basic:Rule>
</PolicyRequirementRule>
IdP Logs:
Configuration was not loaded for shibboleth.AttributeFilterEngine service, error creating components. The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found starting with element 'basic:Rule'. One of '{"urn:mace:shibboleth:2.0:afp":PermitValueRule, "urn:mace:shibboleth:2.0:afp":PermitValueRuleReference, "urn:mace:shibboleth:2.0:afp":DenyValueRule, "urn:mace:shibboleth:2.0:afp":DenyValueRuleReference}' is expected.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150328/c1b91c91/attachment.html
More information about the users
mailing list