Path access control, a bit better

[Young, Darren]

>
>That ucisMemberOf doesn't exist within the SP session, that's about it.
>What's in the response message really doesn't matter, it's what gets
>extracted from it. There's no other obvious reason it wouldn't work.

I checked attribute-map.xml on the machine and verified this is in it:

<Attribute name="1.3.6.1.4.1.9902.2.1.41" id="ucisMemberOf"/>
   <Attribute name="urn:mace:dir:attribute-def:ucisMemberOf"
id="ucisMemberOf²/>

And shibd.log says:
2017-06-21 13:55:57 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute 1.3.6.1.4.1.9902.2.1.41
2017-06-21 13:55:57 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:ucisMemberOf


Is there anywhere else to check to make sure it¹s being extracted?