Using "and" combined with "not" in a policyrequirementrule?

[Tomas Liljebergh]

Hi guys!

Out of an odd reason i would like to use "and" and "not" in a combined policy rule.

Eg:
<AttributeFilterPolicy id="no_service">
    <PolicyRequirementRule xsi:type="AND">
        <Rule xsi:type="Requester" value="https://aaa.bbb.com" />
        <Rule xsi:type="NOT" attributeValue="working" attributeName="some_attribute" />
    </PolicyRequirementRule>

So, if the requester is https://aaa.bbb.com and the value "working" is not present in "some_attribute" i want the rule to be true.

Is this possible?
If so how should i write the rule? I cant get it working

We are running shibboleth 5.1.3 with plans to upgrade later this month!

Regards Tomas



Tomas Liljebergh

Tomas.liljebergh at oru.se



Department for digitalisation and IT

Fakultetsgatan 1

University of Örebro


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250702/663e3782/attachment.htm>