Attributes not being release from AD

[Cantor, Scott]

> No bug.  It doesn't look like there is a returnAttributes in the default for
> idp.attribute.resolver.LDAP.returnAttributes in the default.

The copy checked in has this:

idp.attribute.resolver.LDAP.returnAttributes    = cn,homephone,mail

?

Not a particularly interesting default but the point is the syntax certainly has commas in it. It's being applied directly to the resolver config:

<dc:ReturnAttributes>%{idp.attribute.resolver.LDAP.returnAttributes}</dc:ReturnAttributes>

So, again, commas.

However, my local config does *not* have commas (still on 2.x), so that sort of says there's a bug here. If something's removing the commas, I haven't found it yet.

I'm probably missing something, but I'll let Daniel clarify. I know we have ways of translating comma-delimited lists but I'm not seeing that here yet.
 
-- Scott