Shibboleth Developers

[Will Norris <>]

I just came across this while working on our ARP Constraint stuff --  
there appears to be some weirdness in how multiple <AnyValue>  
statements defined for a single attribute are handled.  The marshall 
() method for Attribute looks for one and only one <AnyValue>  
element, even though the schema allows more than one.  If there are  
zero or more than one, they are all skipped over.  So in the  
following, neither <AnyValue> would be evaluated...

<Attribute name="urn:mace:dir:attribute-def:uid">
        <AnyValue release="accept" />
        <AnyValue release="accept" />
</Attribute>

So the question is, is it valid to have more than one <AnyValue>  
statement?  If not, then the schema is incorrect.  If it is valid,  
then the Attribute marshall() method isn't handling them properly.   
can someone please verify that?

-will

Attachment: smime.p7s
Description: S/MIME cryptographic signature