OpenSAML user discussion

["Tom Scavo" <>]

I'm quite sure you have an old copy of the library.  In OpenSAML 1.1,
the current version of SAMLIdentifier is indeed an interface (as Scott
says):

http://svn.middleware.georgetown.edu/view/trunk/src/org/opensaml/SAMLIdentifier.java?root=java-opensaml1&view=log

If you go all the way back to Revision 171 (Oct 2003), you'll find the
code you posted below.  I think you need to upgrade OpenSAML to the
latest supported version of OpenSAML.

Tom

On 1/10/07, Gitesh Malik 
<>
 wrote:
> Scott, here is the code jar we are using.
>
> From code decompilation I could figure out that SAMLIdentifier is indeed
> a class -
>
> Here is the code for the same:
>
> package org.opensaml;
>
> import java.security.SecureRandom;
>
> public class SAMLIdentifier
> {
>
>     protected StringBuffer id;
>
>     public SAMLIdentifier()
>     {
>         id = new StringBuffer();
>         byte abyte0[] = new byte[32];
>         SecureRandom securerandom = new SecureRandom();
>         do
>         {
>             securerandom.nextBytes(abyte0);
>         } while((abyte0[0] & 0xf) < 10);
>         for(int i = 0; i < 32; i++)
>         {
>             id.append(Character.forDigit(abyte0[i] & 0xf, 16));
>         }
>
>     }
>
>     public String toString()
>     {
>         return id.toString();
>     }
> }
>
> Hence the code compiles and I can see valid SAMLIDentifier being
> generated in my code.
>
> <gitesh/>
>
> -----Original Message-----
> From: Scott Cantor 
> [mailto:]
> Sent: Tuesday, January 09, 2007 8:44 PM
> To: 
>
> Subject: RE: Getting Exception: There are multiple occurrences of ID
> value
>
> > Scott, I had put in a hack in my code to ensure that
> > samlResponse id and assertion id are not same and even If they - a new
> > SAMLidentifier value should be set up as responseid. However there
> seem
> > to be issue with this as well as an attempt to generate a new SAML
> > identifier does not create a new one. (Attached short code and short
> > error log)
>
> I don't know what code you're using, but it's not OpenSAML 1.1.
> SAMLIdentifier is an interface, so "new SAMLIdentifier()" would never
> compile. That sounds like old code. That doesn't explain the problem,
> but
> it's not current code either.
>
> I honestly don't know what to tell you...the problem must be
> environmental,
> with your random number generation. There just isn't anything else I can
> do
> for you.
>
> OpenSAML 1.1 has a pluggable ID generation interface. Just plug in your
> own.
>
> -- Scott