<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you!</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
It was the </Rule> at the end i was missing.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Not it seams to work.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
//Tomas</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Bernd Oberknapp <bo@ub.uni-freiburg.de><br>
<b>Sent:</b> Wednesday, July 2, 2025 13:22<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Subject:</b> Re: [EXTERN] Re: Using "and" combined with "not" in a policyrequirementrule?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Based on similar rules we have for limiting the release of attributes for test
<br>
accounts to specific SPs, this should work:<br>
<br>
<PolicyRequirementRule xsi:type="AND"><br>
<Rule xsi:type="Requester" value="<a href="https://aaa.bbb.com"/">https://aaa.bbb.com"/</a>><br>
<Rule xsi:type="NOT"><br>
<Rule xsi:type="Value" attributeID="some_attribute" value="working" /><br>
</Rule><br>
</PolicyRequirementRule><br>
<br>
Best regards,<br>
Bernd<br>
<br>
<br>
On 02.07.25 13:07, Tomas Liljebergh via users wrote:<br>
> Thanks for checking, but when i try this:<br>
> <br>
> <Rule xsi:type="NOT"/><br>
> <Rule xsi:type="Something" attributeValue="working" <br>
> attributeName="some_attribute" /><br>
> </Rule><br>
> <br>
> <br>
> It says "Line XX in XML document from file [/opt/shibboleth-idp/conf/ <br>
> attribute-filter-custom.xml] is invalid<br>
> <br>
> with the error on this line <Rule xsi:type="NOT"/><br>
> Also tested with removing the / but with the same problem.<br>
> <br>
> <br>
> <br>
> //Tomas<br>
> <br>
> ------------------------------------------------------------------------------<br>
> *From:* users <users-bounces@shibboleth.net> on behalf of Rod Widdowson <br>
> <rdw@steadingsoftware.com><br>
> *Sent:* Wednesday, July 02, 2025 11:38<br>
> *To:* 'Shib Users' <users@shibboleth.net><br>
> *Subject:* RE: Using "and" combined with "not" in a policyrequirementrule?<br>
> <br>
> I don't have the AttributeFilter syntaxt swapped in right now but<br>
> <br>
> > Is this possible?<br>
> <br>
> Yes<br>
> <br>
> > If so how should i write the rule? I cant get it working<br>
> <br>
> What is failing, does it not work or does it not start? Like I say, I don’t <br>
> have the syntax swapped in right now, but off the top of my head<br>
> <br>
> > <Rule xsi:type="NOT" attributeValue="working" <br>
> attributeName="some_attribute" /><br>
> <br>
> Looks dodgy. I would have expected to see<br>
> <br>
> <Rule xsi:type="NOT"/><br>
> <Rule xsi:type="Something" attributeValue="working" <br>
> attributeName="some_attribute" /><br>
> </Rule><br>
> <br>
> <br>
> <br>
> --<br>
> For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/">
https://shibboleth.atlassian.net/</a> <br>
> wiki/x/ZYEpPw <<a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a>><br>
> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
> <br>
<br>
-- <br>
Bernd Oberknapp<br>
Gesamtleitung ReDI<br>
<br>
Albert-Ludwigs-Universität Freiburg<br>
Universitätsbibliothek<br>
Platz der Universität 2 | Postfach 1629<br>
D-79098 Freiburg | D-79016 Freiburg<br>
<br>
Telefon: +49 761 203-3852<br>
Telefax: +49 761 203-3987<br>
E-Mail: bo@ub.uni-freiburg.de<br>
Internet: <a href="http://www.ub.uni-freiburg.de">www.ub.uni-freiburg.de</a><br>
</div>
</span></font></div>
</body>
</html>