OpenSAML user discussion

["Mike Ferraro" <>]

> >     // respond with SAMLSoapBinding.respond()
> >     binding.respond(resp, samlResp, se);
>
> Note that the third parameter is for triggering a SOAP fault, not for
> passing back an error Status in a Response. Basically, you do one or the
> other. Why there aren't just separate methods, I haven't a clue at the
> moment. I don't know what I was thinking at the time.

Gotcha.  I should have realized that from the source code.  It works fine
now that I don't pass an exception, but I have to modify the status code and
message in my SAMLResponse by pulling out the DOM and manually changing the
status values.  Is there another way to specify a response status other than
samlp:Success, or is manually changing it the only way?

>
> > [ERROR] [17 Sep 2004 12:33:05,609] send() received an invalid
> > content type
> > in the response (text/html), with the following content:
>
> Well, that means something must be failing and not catching the error, and
> it's probably sending back an HTML page with the error, if I had to guess.
I
> caught various errors as a failsafe, and triggered a servlet error
response
> in those cases.
>
> I'd suggest capturing the input and using a command line tool like curl to
> simulate the POST if you're not sure.

It looks like the error is coming from within the respond() method when it
tries to process the SAMLException.  That's where the ServletException seems
to get thrown from.  I didn't track down the error fully because I'm not
using that parameter in the respond() method anymore, but just figured that
I'd give a heads-up in case it's something actually wrong with that portion
of the code.  Sorry I'm not more helpfull.