question about RegexpSplitAttributeDefinition

Ullfig, Roberto Alfredo rullfig at uic.edu
Fri Feb 9 14:24:18 EST 2018


This is weird. I have a really basic perl cgi script that prints out all the attributes and the "\" character shows there before every single ";" character (i.e. member\;staff) but the IDP log shows the attribute correctly apparently:

        <saml2:Attribute FriendlyName="eduPersonAffiliation"
            Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
            <saml2:AttributeValue>member;staff</saml2:AttributeValue>
        </saml2:Attribute>

So it's a special character? If I use this script in the IDP:

        isMemberOf.getValues().clear();
        if( typeof AdGroupsConcat != "undefined" )
        {
            for each ( group in AdGroupsConcat.getValues().get(0).split(';') )
            {
                isMemberOf.getValues().add(group);
            }
        }

The cgi script prints the attribute as expected (i.e. member;staff) - the IDP log looks the same as before.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Wessel, Keith
Sent: Friday, February 09, 2018 11:16 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: question about RegexpSplitAttributeDefinition

You could create a scripted attribute definition; all the script would need to do is take the attribute from your data source and do a regex replacement of the backslash character with nothing. You could then release or reference the attribute as needed.

Keith


From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Ullfig, Roberto Alfredo
Sent: Friday, February 09, 2018 11:09 AM
To: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: question about RegexpSplitAttributeDefinition

I have data that looks like this:

member\;staff

I need to get rid of one or more \

(always this character causing problems :) )

Would I able to remove it with RegexpSplitAttributeDefinition? I've tried ([^\\]*) but it doesn't work - works in perl though. Is there an alternative Attr Def that would do what I need? Thanks!

---
Roberto Ullfig - rullfig at uic.edu<mailto:rullfig at uic.edu>
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180209/1f471eca/attachment.html>


More information about the users mailing list