Skip to Content.
Sympa Menu

mace-opensaml-users - Re: org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod

Subject: OpenSAML user discussion

List archive

Re: org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod


Chronological Thread 
  • From: "Tom Scavo" <>
  • To:
  • Subject: Re: org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod
  • Date: Thu, 30 Nov 2006 14:47:52 -0500
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=soexlRfM7gu9jezi6wEGtEzOlnO8jKGoiEOXWFoBRiipCBl6odqWMrr2oU53KJw0xAEkUJUMl25EaRknQGBJ0IctDLBimaI2wwp9CaRbJ4FLbP2COrtvkcOOVKtyaJJBsaujOfZEcsseUNweUZWhvO75ekhA3vnxYUvMlzhk9Vk=
On 11/30/06,


<>
wrote:

org.opensaml.MalformedException: Subject is invalid, requires either
NameIdentifier or at least one ConfirmationMethod
at org.opensaml.SAMLSubject.checkValidity(Unknown Source)
at org.opensaml.SAMLSubject.fromDOM(Unknown Source)
at org.opensaml.SAMLSubject.<init>(Unknown Source)
at org.opensaml.SAMLSubjectStatement.fromDOM(Unknown Source)
at org.opensaml.SAMLAttributeStatement.fromDOM(Unknown Source)
at org.opensaml.SAMLAttributeStatement.<init>(Unknown Source)
at
org.opensaml.SAMLAttributeTest.getAttributeDetails(SAMLAttributeTest.java:31)
at org.opensaml.SAMLAttributeTest.main(SAMLAttributeTest.java:44)

Unless I'm mistaken, it appears that _Element is an Assertion element,
which gets fed into the SAMLAttributeStatement constructor. Of course
we wouldn't expect that to work :-) If you turn on
strict-dom-checking, I think you'll see if fail right off the bat,
before it gets to checkValidity.

private static String propName =
"org.globus.opensaml11.saml.strict-dom-checking";
....
SAMLConfig.instance().setBooleanProperty(propName, Boolean.TRUE);

Archive powered by MHonArc 2.6.16.

Top of Page