<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hello,<br></div><div>My installation: Shibboleth IDP 2.3.7<br></div><div>I've been wrestling with this and can't seem to get it to work, restrict values to what is below. We use 1 other value "none".<br></div><div><br></div><div>This filter policy is in a single policy group<br></div><div><br></div><div><br></div><div>...<br></div><div> <afp:AttributeFilterPolicy id="releaseSpecificAttributes"><br> <afp:PolicyRequirementRule xsi:type="basic:ANY"/><br> <afp:AttributeRule attributeID="eduPersonAffiliation"><br> <afp:PermitValueRule xsi:type="basic:OR" ><br> <basic:Rule xsi:type="basic:AttributeValueString" value="faculty" ignoreCase="true"/><br> <basic:Rule xsi:type="basic:AttributeValueString" value="student" ignoreCase="true"/><br> <basic:Rule xsi:type="AttributeValueString" value="staff" ignoreCase="true" /><br> <basic:Rule xsi:type="AttributeValueString" value="alum" ignoreCase="true" /><br> <basic:Rule xsi:type="AttributeValueString" value="member" ignoreCase="true" /><br> <basic:Rule xsi:type="AttributeValueString" value="affiliate" ignoreCase="true" /><br> <basic:Rule xsi:type="AttributeValueString" value="employee" ignoreCase="true" /><br> <basic:Rule xsi:type="AttributeValueString" value="library-walk-in" ignoreCase="true" /><br> </afp:PermitValueRule><br> </afp:AttributeRule><br> </afp:AttributeFilterPolicy><br></div><div>...<br></div><div><br></div><div>idp-process.log on startup ...</div><div><br></div><div>09:46:40.325 - ERROR
[edu.internet2.middleware.shibboleth.common.config.BaseService:188] -
Configuration was not loaded for shibboleth.AttributeFilterEngine
service, error creating components. The root cause of this error was:
org.springframework.beans.factory.BeanCreationException: RuleReference
elements within an AND rule are not supported</div><div><br></div><div><br></div><div>This works fine:<br></div><div><br></div><div> <afp:AttributeRule attributeID="eduPersonAffiliation"><br> <afp:PermitValueRule xsi:type="basic:ANY" /><br>
</afp:AttributeRule></div><div><br></div><div>Any help would be appreciated, pulling what little hair I have left out!!<br></div><div><br></div><div><span name="x"></span>Kent<span name="x"></span><br></div><div><br></div></div></body></html>