Ran into an issue upgrading from 2.2.1 to 2.3.2 and I'm not sure if I'm missing something in the config or if it's a bug. Attribute values are being sorted alphabetically before being released. This isn't a problem for most multi-valued attributes but order matters for some of them, especially givenName. When it was first reported, I thought that it was an issue with the data in LDAP or a config option for the VTldap library, but it appears to be happening just after the attribute filters are run. Here's the data that LDAP server has:<br>
<br>givenName: Eric<br>givenName: Edward<br><br>And here's the result from the search:<br>07:58:20.019 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:414] - LDAP data connector usfLDAP - Found the following attribute: givenname[Eric, Edward]<br>
<br>Then, after the attributes go through the filtering policies, they are sorted alphabetically:<br>07:58:20.039 - TRACE [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:173] - The following value for attribute givenName meets the permit value rule: Eric<br>
07:58:20.039 - TRACE [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:173] - The following value for attribute givenName meets the permit value rule: Edward<br>07:58:20.042 - TRACE [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:109] - Permitted values for attribute givenName are: [Edward, Eric]<br clear="all">
<br>And the SAML ouput reflects the new order:<br> <saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br> <saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string">Edward</saml2:AttributeValue><br>
<saml2:AttributeValue xmlns:xs="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="xs:string">Eric</saml2:AttributeValue><br>
</saml2:Attribute><br><br>I didn't change any config files when moving from 2.2.1 to 2.3.2, so I was thinking there might have been a change in defaults between the two versions, but I can't find anything obvious in the new files. Anyone seen this before?<br>
<br>Thanks,<br>-Eric<br><br>-- <br>Eric Pierce<br>Identity Management Architect<br>Information Technology<br>University of South Florida<br>(813) 974-8868 -- <a href="mailto:epierce@usf.edu">epierce@usf.edu</a><br>