OpenSAML user discussion

[Farrukh Najmi <>]

Sanga Viswanathan wrote:

> I have been using JAXB in conjunction with opensaml and had issues with
> signature verification. If I let JAXB do the unmarshalling/marshalling and
> then pass it over to opensaml, I could never get signatures to work.
> Primarily because JAXB was modifying the xml in some way after
> marshal/unmarshal. I had to explicitly use opensaml and let it do all the
> parsing/c14n etc.
>  
Thanks Sanga and Scott for all your great experience sharing.

I have been using JAXB and XML DSIG API for signature generation and 
verification without any issues for about a year in [1]
It saved me a ton of work and I highly reccomend opensaml 2.0 consider it.

Could it be that you used an older version of JAXB or maybe your issue 
would have been resolved if you had pursued it with the very responsive 
JAXB team.

[1] freebXML Registry Open Source Project
http://ebxmlrr.sourceforge.net

> However I have found JAXB to be pretty useful in general when dealing with
> xml.
>
> -Sanga
>
>
>
> -----Original Message-----
> From: Farrukh Najmi [mailto:] 
> Sent: Wednesday, October 13, 2004 2:10 PM
> To: 
>
> Subject: Re: opensaml toolkit and JAXB generated bindings for SAML 1.1 XML
> Schemas
>
>
> Hi Scott,
>
> I spent 30 minutes with JAXB and generated the SAML 1.1 bindings 
> classes. I have not analyzed the generated code much yet. Note that 
> bindings can easily be custmized for a wide array of use cases if 
> desired. This is just the first attempt with default settings and no 
> customization.
>
> The bindings may be found at:
>
> # The compiled java classes/interfaces generated by JAXB
> http://ebxmlrr.sourceforge.net/tmp/oasis-saml1.1.jar
>
> # The javadoc for the classes/interfaces generated by JAXB. Un-jar and 
> browse index.html file
> http://ebxmlrr.sourceforge.net/tmp/oasis-saml1.1-doc.jar
>
> # The source java classes/interfaces generated by JAXB
> http://ebxmlrr.sourceforge.net/tmp/oasis-saml1.1-src.jar
>
> Note that you can safely ignore the xx.impl packages and XxImpl classes 
> unless you care to see how JAXB generated code looks like.
> When you have a choice between class Xyz and class XyzType the XyzType 
> javadoc is more useful.
>
> Notice that the package hierarchy follows the namespace hierarchy 
> defined by the spec.
> Also note that implementation is separated from interfaces and that 
> clients typically use interfaces only.
>
> I would be interested in any analysis of the generated bindings.
>
> I would also be curious if a JAXB bindings based approached could be 
> cosnidered by opensaml project for SAML 2.0 ( I can provide similar 
> bindings for 2.0 in no time).
>
> Thanks for sharing your thoughts.
>
>  


--
Regards,
Farrukh