OpenSAML user discussion

[Grover Manuel Campos Ancajima <>]

Scott Cantor escribió:

	   I'm making a system, I need send a Authorization Decision Query
with Evidence a Attribute Assertion. the servlet 'QueryWSE' send a
SAMLRequest to other servlet 'Autoridad', I got a SAMLException from
Autoridad, that exception is logic but not's logic why that exception?
    

Not all your code is there, but it looks like you're reusing the same
subject parameter and passing it into two different objects as a piece to
include. You need to clone the subject to use it twice, because I don't copy
anything for the caller. My C++ poking through, I prefer to favor efficiency
over assuming that copying is needed.

  

SAMLAssertion assertion = aut.getAttributeAssertion(user, subject);
    

Change the second parameter to subject.clone() and it should fix it.

-- Scott
  

First: thanks for your faster response, I try with your suggest, but it don't work, well work (now seems I get a Request correct) but got this exception:

java.lang.NullPointerException
        at org.apache.xerces.dom.ElementImpl.setIdAttributeNode(Unknown Source)
        at org.opensaml.SAMLAssertion.fromDOM(Unknown Source)
        at org.opensaml.SAMLAssertion.<init>(Unknown Source)
        at org.catalogo.web.QueryWSExtendido.comprobar(QueryWSExtendido.java:234)


I modified the code:

            .......
        SAMLSubject suj = (SAMLSubject)subject.clone();
        SAMLAssertion assertion = aut.getAttributeAssertion(user, suj);
        SAMLAuthorizationDecisionQuery query =
            new SAMLAuthorizationDecisionQuery();
        SAMLAction action = "new" SAMLAction();
        // setup el action
        action.setData("Read");
        action.setNamespace(SAMLAction.SAML_ACTION_NAMESPACE_RWEDC);
        // setup el query
        query.setSubject((SAMLSubject)subject.clone());
            .........
       
The AttributeStatement of the Assertion of the evidence already contains the subject. But now failed from comprobar:

    private boolean comprobar(SAMLObject asercion) throws IOException{
        try{
            ByteArrayOutputStream os = new ByteArrayOutputStream();
            asercion.toStream(os);
            ByteArrayInputStream is = new ByteArrayInputStream(os.toByteArray());
            SAMLAssertion otro = new SAMLAssertion(is);    <----- line 234
            return true;
        } catch(SAMLException se){
            Util.logger("comprobar", se.toString());
            return false;
        }
    }