script for defining right "cn" attribute.

[Peter Schober]

* Josef Karliak <karliak at ajetaci.cz> [2016-01-15 07:24]:
>   So I define a "cn" by this script in the "attribute-resolver.xml":

No need for a script, the Template type attribute definition is
sufficient for that:
https://wiki.shibboleth.net/confluence/display/IDP30/TemplateAttributeDefinition

> I see a "cn" attribute in the idp-process.log, but it seems to be empty,
> SP test page do not display this attribute. Attributes used by this
> script are diplayed.

Since the audit log says "cn" has been released (and assuming that
comes from the config you posted) you'd need to look at the SP side
(i.e., ask CESNET). Or look at the SAML assertion for possible reasons
why the SP would reject it (requires debugging of the appropriate
opensaml classes in the IDP).
Asking the SP why CN wasn't accepted seems much easier, as the answer
will be definitive from their logs.
-peter