OpenSAML user discussion

["Scott Cantor" <>]

> So, our conclusion is that you always endorse resolver, 
> xalan, xercesImpl, and xml-apis (no matter if you use Tomcat 
> 5.0 or 5.5/Java 1.4 or 5). Is that correct?

Yes, there is no other way to reliably override the Sun parser. It shouldn't
be necessary with 1.5, but Xerces' JAXP override logic is screwed up.

I still have no idea why Sun's parser is leaking, but this seems like a
fairly massive error on their part.

-- Scott