<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>I went through this with you a long time ago, you checked the syntax and couldn't find anything wrong. Suggested upgrading to the 2.4 version. I finally gave up and just created duplicate entries. I tried again recently. Same outcome. <br></div><div><br></div><div> OK, so it is not a java problem<br></div><div><br></div><div>Should below work?<br></div><div><br><afp:AttributeFilterPolicy id="release-policy1"><br> <afp:PolicyRequirementRule xsi:type="basic:OR"><br> <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://entityID-1"/><br> <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://entityID-2"/><br> </afp:PolicyRequirementRule><br></div><div> <afp:AttributeRule attributeID="email"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> <afp:AttributeRule attributeID="givenName"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> <afp:AttributeRule attributeID="surname"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> <afp:AttributeRule attributeID="commonName"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> <afp:AttributeRule attributeID="displayName"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> <afp:AttributeRule attributeID="eduPersonPrincipalName"><br> <afp:PermitValueRule xsi:type="basic:ANY"/><br> </afp:AttributeRule><br> </afp:AttributeFilterPolicy><br><div><br></div><div>I get this:<br></div><div><br></div></div><div>11:09:22.453 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.filtering.AttributeFilterPolicyBeanDefinitionParser:72] - Parsing configuration for attribute filter policy release-policy1<br>11:09:22.455 - ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.AttributeFilterEngine service, error creating components. The root cause of this error was: org.springframework.beans.factory.BeanCreationException: RuleReference elements within an AND rule are not supported<br></div><div><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Scott Cantor" <cantor.2@osu.edu><br><b>To: </b>"Shib Users" <users@shibboleth.net><br><b>Sent: </b>Monday, February 24, 2014 10:46:13 AM<br><b>Subject: </b>Re: attribute-filter.xml parsing error<br><div><br></div>On 2/24/14, 10:39 AM, "Kent Nasveschuk" <knasveschuk@mbl.edu> wrote:<br><div><br></div>>I've always had problems with this just wondering if anyone else has<br>>experienced the same and or what I can do to resolve it<br><div><br></div>The issue is with your syntax (and some issues with the schema that make<br>this harder than it should be).<br><div><br></div>>Any use of AND or OR in attribute-filter.xml usually ends in an error<br>>message something to the effect "unsupported". Nested rules don't work.<br><div><br></div>Yes, they do. I use them.<br><div><br></div>>There is no use in going over the syntax again because it just doesn't<br>>work with my current system. Even the simplest configuration, throws an<br>>error.<br><div><br></div>Feel free to ignore me then, but going over the syntax is the only fix.<br><div><br></div>The usual mistake is not using <basic:Rule> in the nested elements, IIRC.<br><div><br></div>-- Scott<br><div><br></div><br>--<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div><div><br></div></div></body></html>