Custom nameid getting released in version 2 but not version 3
Cantor, Scott
cantor.2 at osu.edu
Fri Aug 5 19:23:41 EDT 2016
On 8/5/16, 6:46 PM, "users on behalf of shibboleth655 at lewenberg.com" <users-bounces at shibboleth.net on behalf of shibboleth655 at lewenberg.com> wrote:
>
> We are using Shibboleth 3.2.1 with nameid-formats using the legacy
> generators. We define an attribute "mailNameID" with a nameid encoder in
> attribute-resolver.xml that depends on another attribute (in this case
> "mail"). In attribute-filter.xml we explicitly release "mailNameID" but
> we do _not_ release the "mail" attribute.
>
> When we do this, the "mailNameID" does not get released. If we
> explicitly release the "mail" attribute along with "mailNameID", then
> "mailNameID" _does_ get released.
That strikes me as physically impossible based on what I know of the code and the order of processing, so I have no explanation for that and would like to see an issue filed for no other reason than understanding how that could ever be possible.
I would not expect V3 to behave any differently from V2, filtering happens after in both cases.
-- Scott
More information about the users
mailing list