OpenSAML user discussion

["JASON D'CRUZ" <>]

Thanks Scott and Chad,

The problem did appear to be a bug at the container end and I've taken up the issue with them.

Regards,

Jason

On Tue, Oct 21, 2008 at 5:21 AM, Chad La Joie <> wrote:

No, I don't think there is any way to do this in the OpenSAML 1.1 or the
currently supported 2.X version.

If there is some way to approach the people who made the container you
should talk with them.  It's likely that even if there was a way to
remove those namespaces you'd run in to other issues.  These sorts of
bugs tend to be indicative of just poor support for things like signatures.

JASON D'CRUZ wrote:
> Hi,
> I'm using opensaml 1.1 and the assertion which are created contain the
> namespaces
>
> xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="
> http://www.w3.org/2001/XMLSchema-instance"
>
> I'm using the assertion to call a web service .
>
> In a certain application container the reconstructed saml assertion is
> missing these two namespaces hence causing signature validation to fail.
>
> Is there a way to generate the Assertion without these namespaces ,and if so
> , is that the correct way to solve this problem?
>
>
> Assertion constructed by me
>
> <?xml version="1.0" encoding="UTF-8"?><Assertion
> xmlns="urn:oasis:names:tc:SAML:1.0:assertion"
> xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
> xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:xsd="
> http://www.w3.org/2001/XMLSchema" xmlns:xsi="
> http://www.w3.org/2001/XMLSchema-instance"
> AssertionID="_6df8a06f10206a7d662e290aa7d062ed"
> IssueInstant="2008-10-15T15:25:31.843Z" Issuer="http://ewsm.rsa.com/STS"
> .......
>
>
>
>
> Assertion received at the container
>
> <?xml version="1.0" encoding="UTF-8"?><Assertion
> xmlns="urn:oasis:names:tc:SAML:1.0:assertion"
> xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
> xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
> AssertionID="_6df8a06f10206a7d662e290aa7d062ed"
> IssueInstant="2008-10-15T15:25:31.843Z" Issuer="http://ewsm.rsa.com/

> ......<http://ewsm.rsa.com/STS>

>
> Truncating the assertions as my previous mail got rejected due to the size
> being over the allowable linit

--

SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
, http://www.switch.ch

--
Regards,
Jason