search

IdentityPython / pysaml2

Python implementation of SAML2
Apache License 2.0
556 stars 422 forks source link

Attribute map collisions #489

Open c00kiemon5ter opened 6 years ago

c00kiemon5ter commented 6 years ago

Looking into attributemaps/saml_uri.py I see the following (picking parts):

UCL_DIR_PILOT = 'urn:oid:0.9.2342.19200300.100.1.'
LDAPGVAT_UCL_DIR_PILOT = UCL_DIR_PILOT

MAP = {
# [...]
        LDAPGVAT_UCL_DIR_PILOT+'1': 'PVP-USERID',
        LDAPGVAT_UCL_DIR_PILOT+'3': 'PVP-MAIL',
# [...]
        UCL_DIR_PILOT+'1': 'uid',
        UCL_DIR_PILOT+'3': 'mail',
# [...]
}

This will of course result in PVP-USERID and PVP-MAIL not exist as values in the dict, as they will be overwritten by uid and mail respectively.

peppelinux commented 4 years ago

Yes this is so, faced with R&S and SPID profile together in SATOSA, with attr name format both in basic and oid. collisions!