Issue extracting multiple attributes from LDAP in Shibboleth 4.0.1

Cantor, Scott cantor.2 at
Tue Nov 24 01:48:46 UTC 2020

On 11/23/20, 8:40 PM, "users on behalf of Feinstein, Moses" <users-bounces at on behalf of moses.feinstein at> wrote:

>    This does not seem to be accurate, since “myLdap” connector works just fine if I remove this configuration and I am able
> to extract single attributes from it. 

Short of mistyping something, I would perhaps consider there's a bug, since you're not meant to be naming the same connector twice. You need to list both attributes in a list in the attributeNames setting of a single dependency element. It's possible trying to list it twice is throwing a misleading error by only looking at the "rest" of the candidate connectors because myLdap is already installed as a dependency once.

It's nothing new, the same thing would have happened in 3.4.

-- Scott

More information about the users mailing list