OpenSAML user discussion

[Deena Gurajala <>]

If I remove that attribute and validate it, then it won't throw any validation error. If I add it back, I am getting that error. I don't think it is problem with openSAML either. I replaced validation code with pure JAVA XML validation code. I placed the required schema files in the class path. Still it is throwing same error.


SchemaFactory schFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);

      // load a WXS schema, represented by a Schema instance
        Source schemaFile = new StreamSource(new File("metadata.xsd"));
        Schema schema = schFactory.newSchema(schemaFile);

        Validator validator = schema.newValidator();
    
        validator.validate(domSrc);

I attached the xml. Any thoughts.

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
	entityID="http://localhost";>
	<md:AuthnAuthorityDescriptor
		protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
		<md:KeyDescriptor use="signing">
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
				<ds:X509Data>
					<ds:X509Certificate>
						MIIBoTCCAQqgAwIBAgIESoHE6DANBgkqhkiG9w0BAQUFADAVMRMwEQYDVQQDEwpjbGllbnR1c2Vy
						MB4XDTA5MDgxMTE5MjIxNloXDTA5MTEwOTE5MjIxNlowFTETMBEGA1UEAxMKY2xpZW50dXNlcjCB
						nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA7e67VNlrWgKIGxRMDttT73Hsam/+Ffo73dJ4ePBo
						gsSI4AM+xbt47Xo+VU8h4xNQI1Hc58E1zqoSLYDIJBodT167hpBJYv8CAwEAATANBgkqhkiG9w0B
						AQUFAAOBgQDq9rg28Ve3obVLxPPdvw0yWAISL65+LCDIKoXo18UqGjOFCXmuSWPeXi5Pqsh64DQO
						WQgEArZpaOuh9DvgISRvIgnZfOZKMrmbkIyCS7Adf2tGrMnebDVr81p635fDWVVHa2PM0iiTfMp0
						ShHXRAA8uDgV4sO7RuOVqhc6wN8o3Q==</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</md:KeyDescriptor>
		<md:AuthnQueryService
			Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
			Location="http://localhost:8080/authn"; />
	</md:AuthnAuthorityDescriptor>
	<md:PDPDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
		<md:KeyDescriptor use="signing">
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
				<ds:X509Data>
					<ds:X509Certificate>
						MIIBoTCCAQqgAwIBAgIESoHE6DANBgkqhkiG9w0BAQUFADAVMRMwEQYDVQQDEwpjbGllbnR1c2Vy
						MB4XDTA5MDgxMTE5MjIxNloXDTA5MTEwOTE5MjIxNlowFTETMBEGA1UEAxMKY2xpZW50dXNlcjCB
						TLono2EKjkEKu9y69hK5e9WSlCu1+K4pcAt6SeF1RnTNGTsD18LiopgIsnJacGp3jYjU3g9K4ps2
						gsSI4AM+xbt47Xo+VU8h4xNQI1Hc58E1zqoSLYDIJBodT167hpBJYv8CAwEAATANBgkqhkiG9w0B
						AQUFAAOBgQDq9rg28Ve3obVLxPPdvw0yWAISL65+LCDIKoXo18UqGjOFCXmuSWPeXi5Pqsh64DQO
						WQgEArZpaOuh9DvgISRvIgnZfOZKMrmbkIyCS7Adf2tGrMnebDVr81p635fDWVVHa2PM0iiTfMp0
						ShHXRAA8uDgV4sO7RuOVqhc6wN8o3Q==</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</md:KeyDescriptor>
		<md:AuthzService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
			Location="http://localhost:8080/authz"; />
	</md:PDPDescriptor>
</md:EntityDescriptor>