authentication positive - attributes negative

[Rod Widdowson]

> I can successfully login to dfn testservers but I don’t get attributes. I think it hase to do with the 3 LDAP Servers I’m looking
form my Users.
 
And what do the logs say?  

In your shoes I'd be

- reproducing under aacli
- looking at the logs (turned up to DEBUG  for net.shibboleth.attribute)
- comparing working with non working.

Given your definitions in which you are "gluing" the same attribute together from all three resolvers I'd guess that one of them is
down - you don't have any failover connectors so the failure of one will cause everything to stop dead.