Skip to Content.
Sympa Menu

mace-opensaml-users - Re: [OpenSAML] Attribute Values in XACMLAuthzQuery

Subject: OpenSAML user discussion

List archive

Re: [OpenSAML] Attribute Values in XACMLAuthzQuery


Chronological Thread 
  • From: "Håkon Sagehaug" <>
  • To:
  • Subject: Re: [OpenSAML] Attribute Values in XACMLAuthzQuery
  • Date: Thu, 5 Jun 2008 16:04:30 +0200
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:in-reply-to:mime-version :content-type:references:x-google-sender-auth; b=FGU2ijrtAdOKi9CunXcUaWtR+ElwM+7DGG9158P2yzOOO0k3wzBoJX0/IcBkA2rcgX e+W+43gP7T7F0/njUdwPku2RmcOw3ifnJHN9RP4/ixc27hNXYgPGBGN/Qy4Oxq8SJGNl T31dgmrr672Ocu0/ifTra9eEl0RFd6qW4iAzo=

Hi

So an element like this

<xacml-context:AttributeValue>
           <Element xmlns:xs="http://www.w3.org/2001/XMLSchema"
                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:type="xs:string">test</Element>
                https://192.168.1.100:1883/wsrf/services/xacml/TestService2
 </xacml-context:AttributeValue>

Is retrived

List<XMLObject> unKnown = attributeValue
                .getUnknownXMLObjects();
            if (unKnown.size() > 0) {
            for (XMLObject valueUnKnown : unKnown) {
                XSString string = (XSString) valueUnKnown;

                log.info("Value unknown " + string.getValue());
            }
            }

Here I sorf of know that it's a string, just for testing.

Also

2008/6/5 Chad La Joie <>:
The library does not support mixed content.  So you use either one or the other methods to set what you want.  Either a string or XML conent.


Rachana Ananthakrishnan wrote:
Ok, CDATA or any XML Element. So how should the API be used? I see two
relevant methods: setValue() which allows a string and another
getUnknownXMLObjects(). It is expected that these two methods be used to set
Attribute Value?

Rachana

-----Original Message-----
From: Chad La Joie [mailto:] Sent: Wednesday, June 04, 2008 3:38 PM
To:
Subject: Re: [OpenSAML] Attribute Values in XACMLAuthzQuery

No, the schema says it can be a string or an XML element.

Rachana Ananthakrishnan wrote:
Hi,
 Thanks. This API allows only string to be set as value of
attribute. But
really the attribute value can be any Java object that is
serializable,
right?  Rachana


 _____  
From: [mailto:] On
Behalf Of Håkon
Sagehaug
Sent: Wednesday, June 04, 2008 4:21 AM
To:
Subject: [OpenSAML] Attribute Values in XACMLAuthzQuery


Hi Rachana,

I see that my guide is wrong on that point. I made a
attribute value like it
done in saml, but in saml the attribute value is defined like this

<element name="AttributeValue" type="anyType" nillable="true"/>

But in xacml like this
<xs:element name="AttributeValue" type="xacml-context:AttributeVa lueType"/>
<xs:complexType name="AttributeValueType" mixed="true">
 <xs:sequence>
 <xs:any namespace="##any" processContents="lax" minOccurs="0"
 maxOccurs="unbounded"/>
 </xs:sequence>
 <xs:anyAttribute namespace="##any" processContents="lax"/>
 </xs:complexType>

So the correct way of creating a attribute value is like this

AttributeValueTypeImplBuilder attributeValueBuilder =
(AttributeValueTypeImplBuilder) builderFactory
       .getBuilder(AttributeValueType.DEFAULT_ELEMENT_NAME);

   AttributeValueType actionAttributeValue = attributeValueBuilder
       .buildObject();

   actionAttributeValue.setValue(actionString);

Then the output is correct

 <xacml-context:Attribute AttributeId="urn:action" Issuer="issuer">
       
<xacml-context:AttributeValue>action</xacml-context:AttributeValue>
     </xacml-context:Attribute>


--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
, http://www.switch.ch




--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
, http://www.switch.ch




--
Håkon Sagehaug, Software Developer
Parallab, Bergen Center for Computational Science (BCCS)
UNIFOB AS (University of Bergen Research Company)


Archive powered by MHonArc 2.6.16.

Top of Page