troubleshooting attribute release for idp 3.3.3

[Peter Schober]

* Scott Koranda <skoranda at gmail.com> [2018-08-25 11:47]:
> > * Pablo Vidaurri <psvidaurri at gmail.com> [2018-08-25 02:37]:
> > > How can I troubleshoot attribute resolution and filtering?
> 
> There is a command line tool.

The aacli is great. It just doesn't tell you /why/ something doesn't
leave the IDP, only /that/. Which the OP already seems to know.

Otherwise fully +1, testing/verifying config changes has become a
breeze with reloadable services (e.g. edit the resolver config &
reload the resolver) and a quick aacli run.

-peter