Skip to Content.
Sympa Menu

mace-opensaml-users - [OpenSAML] Attribute Values in XACMLAuthzQuery

Subject: OpenSAML user discussion

List archive

[OpenSAML] Attribute Values in XACMLAuthzQuery


Chronological Thread 
  • From: "Håkon Sagehaug" <>
  • To:
  • Subject: [OpenSAML] Attribute Values in XACMLAuthzQuery
  • Date: Wed, 4 Jun 2008 11:20:59 +0200
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type :x-google-sender-auth; b=L+eG9591ApNPAsQWEpL4qKXNGQjCUDaqE5TRRXj9iRbEuKoe/eC86adaIxKTSJvsOa KQZgL1ZLLZCvwXohlm5Gj6vO1jEV+RM+TV3g9t+iCj/p2xeBATfcMB+aKPfR0zMJIHkO 8OS+3czh3OYp/dBh7cauG3TzaL+BNxYkYqAmY=

Hi Rachana,

I see that my guide is wrong on that point. I made a attribute value like it done in saml, but in saml the attribute value is defined like this

<element name="AttributeValue" type="anyType" nillable="true"/>

But in xacml like this

<xs:element name="AttributeValue" type="xacml-context:AttributeVa
lueType"/>
<xs:complexType name="AttributeValueType" mixed="true">
 <xs:sequence>
 <xs:any namespace="##any" processContents="lax" minOccurs="0"
 maxOccurs="unbounded"/>
 </xs:sequence>
 <xs:anyAttribute namespace="##any" processContents="lax"/>
 </xs:complexType>

So the correct way of creating a attribute value is like this

AttributeValueTypeImplBuilder attributeValueBuilder = (AttributeValueTypeImplBuilder) builderFactory
        .getBuilder(AttributeValueType.DEFAULT_ELEMENT_NAME);

    AttributeValueType actionAttributeValue = attributeValueBuilder
        .buildObject();

    actionAttributeValue.setValue(actionString);

Then the output is correct

 <xacml-context:Attribute AttributeId="urn:action" Issuer="issuer">
         <xacml-context:AttributeValue>action</xacml-context:AttributeValue>
      </xacml-context:Attribute>


--
Håkon Sagehaug, Software Developer
Parallab, Bergen Center for Computational Science (BCCS)
UNIFOB AS (University of Bergen Research Company)


Archive powered by MHonArc 2.6.16.

Top of Page