template attribute definition possible bug?

[Krug, Jeff]

Based on my reading of mapped and your data set below (I added an attribute encoder so I could get the on the wire result), I got what I would have expected with OpenJDK:

<saml2:Attribute Name="TestAttribute" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue>a1v2:A2V2</saml2:AttributeValue>
<saml2:AttributeValue>a1v1:A2V1</saml2:AttributeValue>
</saml2:Attribute>

If mapped was supposed to remove the V2s, then maybe there is a bug with OpenJDK.  Otherwise, it sounds like if there is a bug it's somehow in the LDAP configuration (or LDAP itself).


________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Rod Widdowson <rdw at steadingsoftware.com>
Sent: Tuesday, November 3, 2015 6:04 AM
To: 'Shib Users'
Subject: RE: template attribute definition possible bug?

So there must be one of two things going on:

1) Either there is a bug (somewhere in something) or
2) We have not documented something clearly enough

I have tried an obvious reproducer ((http://tinyurl.com/ovjdjon - this
redirects to svn.shibboleth.net)

And seen exactly what I (and you) would expect to have seen.

You might like to try this example and see what it does for you (which might
help us to rule out OpenJDK).

If you can you generate a stand along reproducer either using the static
data connector or (if absolutely required) with a cut down ldif file and put
them into a JIRA case (or mail me back channel) I'll dig into it as best I
can.

One question I do have, you said:

> My main problem with the Template is that the source attributes must all
exist and be equal number. So I cannot
> use the ldap connector to feed it directly, if the attribute in use is not
guaranteed to exist.

Can you expand with what your data looks like and how you are using the
"mapped" definition to align the counts?  Do you have null values coming
back from the LDAP ?

Thanks
/Rod



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net