Using "and" combined with "not" in a policyrequirementrule?

[Tomas Liljebergh]

Thanks for checking, but when i try this:

<Rule xsi:type="NOT"/>
  <Rule  xsi:type="Something" attributeValue="working" attributeName="some_attribute" />
</Rule>


It says "Line XX in XML document from file [/opt/shibboleth-idp/conf/attribute-filter-custom.xml] is invalid

with the error on this line <Rule xsi:type="NOT"/>
Also tested with removing the / but with the same problem.



//Tomas

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Rod Widdowson <rdw at steadingsoftware.com>
Sent: Wednesday, July 02, 2025 11:38
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: Using "and" combined with "not" in a policyrequirementrule?

I don't have the AttributeFilter syntaxt swapped in right now but

> Is this possible?

Yes

> If so how should i write the rule? I cant get it working

What is failing, does it not work or does it not start?  Like I say, I don’t have the syntax swapped in right now, but off the top of my head

>  <Rule xsi:type="NOT" attributeValue="working" attributeName="some_attribute" />

Looks dodgy.  I would have expected to see

<Rule xsi:type="NOT"/>
  <Rule  xsi:type="Something" attributeValue="working" attributeName="some_attribute" />
</Rule>



--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250702/a0ab6d11/attachment.htm>