Skip to Content.
Sympa Menu

mace-opensaml-users - Invalid request request generated by Open SAML?

Subject: OpenSAML user discussion

List archive

Invalid request request generated by Open SAML?


Chronological Thread 
  • From: Winson Quock <>
  • To:
  • Subject: Invalid request request generated by Open SAML?
  • Date: Fri, 10 Nov 2006 12:27:48 -0800
Hi,

I'm using 1.1b of OpenSAML for Java. When sending an SAMLRequest using the SOAPHTTPBindingProvider to the TestShibb AA, I keep getting an "invalid request data". The request's XML document seems valid. The sibject is cloned from the IdP assertion's SAMLSubject with the SubjectConfirmation removed. Any idea what is wrong?

Thanks.

--

The dumps of the request and response:

Request:
<?xml version="1.0" encoding="UTF-8"?>
<Envelope xmlns="http://schemas.xmlsoap.org/soap/envelope/";>
<Body>
<Request xmlns="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
IssueInstant="2006-11-10T19:56:11.625Z" MajorVersion="1" MinorVersion="1" RequestID="5284716745717568153">
<AttributeQuery Resource="https://ithaki/sso/samlACS/shibboleth/testshib/sp";>
<Subject xmlns="urn:oasis:names:tc:SAML:1.0:assertion">
<NameIdentifier Format="urn:mace:shibboleth:1.0:nameIdentifier" NameQualifier="https://idp.testshib.org/shibboleth/testshib/idp";>
_6ad2c404e3c84c224631f5ba835aca3d
</NameIdentifier>
</Subject>
</AttributeQuery>
</Request>
</Body>
</Envelope>

Response:
<?xml version="1.0" encoding="UTF-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:xsd="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
<soap:Body><Response xmlns="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
IssueInstant="2006-11-10T18:48:47.194Z" MajorVersion="1" MinorVersion="1"
ResponseID="_304a1645dbf2e0f0f2d7c6509c0c220d">
<Status>
<StatusCode Value="samlp:Responder"/>
<StatusMessage>Invalid request data.</StatusMessage>
</Status></Response>
</soap:Body>
</soap:Envelope>





Archive powered by MHonArc 2.6.16.

Top of Page