Attribute-Filter AttributeValueRegex

Filipozzi, Luca luca.filipozzi at ubc.ca
Sat Mar 28 01:30:22 EDT 2015


Hi,

Doesn't
  <basic:Rule xsi:type="basic:OR">

want to be
  <afp:PermitValueRule xsi:type="basic:OR">

?

--
Luca Filipozzi, UBC IT Enterprise Architecture

On 2015-03-27, 21:57, "Joshua Brodie" <josbrodie at gmail.com<mailto:josbrodie at gmail.com>> wrote:

Hi:

The following to attribute-filter.xml - but the error below was obtained on IdP - did I miss something obvious?

        <afp:AttributeRule attributeID="eduPersonEntitlement">
            <basic:Rule xsi:type="basic:OR">
                <basic:Rule xsi:type="basic:AttributeValueRegex" regex="FOO" />
                <basic:Rule xsi:type="basic:AttributeValueRegex" regex="BAR" />
            </basic:Rule>
        </PolicyRequirementRule>


IdP Logs:

Configuration was not loaded for shibboleth.AttributeFilterEngine service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found starting with element 'basic:Rule'. One of '{"urn:mace:shibboleth:2.0:afp":PermitValueRule, "urn:mace:shibboleth:2.0:afp":PermitValueRuleReference, "urn:mace:shibboleth:2.0:afp":DenyValueRule, "urn:mace:shibboleth:2.0:afp":DenyValueRuleReference}' is expected.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150328/c1b91c91/attachment.html 


More information about the users mailing list