<div dir="ltr">Hi all,<div><br></div><div>I would like to know if it's possible to configure the separator for multi valued attributes like MemberOf.</div><div><br></div><div>I'm trying to configure rules on juniper but when i see in my juniper debug log the MemberOf attribute supplied by shibboleth idp look like this : MemberOf = "group1 group2 group3"</div><div><br></div><div>So my rule userAttr.MemberOf = "group1" don't match. i have to put this rule userAttr.MemberOf = "*group1*"</div><div><br></div><div>The problem is that the wildcard is not suitable for us. </div><div><br></div><div>When i test with an LDAP authtification on juniper, my MemberOf attribute look like this : MemberOf = "group1"; group2"; "group3"</div><div><br></div><div>in this form my rule userAttr.MemberOf = "group1" match perfectly.</div><div><br></div><div>Any help will be really appreciated </div><div><br></div><div>Thanks<br clear="all"><div> </div>-- <br><div class="gmail_signature">Armando Martins<br></div>
</div></div>