OpenSAML user discussion

[Michael <>]

Brent,
Are these lists correct and complete (especially versions) ?

WEB-INF directory jars: 
bcprov-ext-jdk15-1.40.jar 
commons-codec-1.3.jar 
commons-collections-3.1.jar 
commons-httpclient-3.1.jar 
commons-lang-2.1.jar 
jargs-1.0.jar 
jcip-annotations-1.0.jar 
jcl-over-slf4j-1.5.5.jar 
joda-time-1.5.2.jar 
log4j-over-slf4j-1.5.5.jar 
not-yet-commons-ssl-0.3.9.jar 
opensaml-2.2.3.jar 
openws-1.2.2.jar 
slf4j-api-1.5.6.jar 
slf4j-jdk14-1.5.6.jar 
slf4j-nop-1.5.6.jar 
velocity-1.5.jar 
xmlsec-1.4.2.jar 
xmltooling-1.2.0.jar 

endorsed directory jars: 
resolver-2.9.1.jar 
serializer-2.9.1.jar 
xalan-2.7.1.jar 
xercesImpl-2.9.1.jar 
xml-apis-2.9.1.jar 

Thank you,

Michael

> Date: Mon, 10 Jan 2011 18:51:24 -0500
> From: 
> 
> To: 
> 
> Subject: Re: [OpenSAML] OpenSAML/ Weblogic exception ->
NoClassDefFoundError: org/apache/xml/security/Init exception
> 
> 
> 
> 
> > Also I added the following jars to the WEB-INF/lib folder: 
> > catalina-root.jar 
> > commons-codec-1.3.jar 
> > jdom.jar 
> > opensaml-2.2.3.jar 
> > xmldsig.jar 
> > xmlsec-2.0.jar 
> > xmltooling-1.2.0.jar 
> > and updated weblogic.xml with the following part: 
> > <wls:container-descriptor> 
> > <wls:prefer-web-inf-classes>true</wls:prefer-web-inf-classes> 
> > </wls:container-descriptor> 
> > All these attempts led me to the same result - runtime exception. 
> > At this point I think that I need help to resolve this issue. 
> 
> IIRC, the prefer-web-inf-classes = true means in general you want to
> load your app-specific jars in you webapp WEB-INF/lib. That's could. I
> think that's preferable.
> 
> In that case, to reiterate what Chad said all 20+ (approximately) jars
> shipped in the OpenSAML dist's /lib directory need to be added to your
> webapp's WEB-INF/lib (and not to any endorsed directory, only the ones
> we indicate as such should be endoresed). The above list isn't remotely
> complete, I think you're missing a bunch.
> 
> But in particular you list:
> 
> xmldsig.jar
> xmlsec-2.0.jar
> 
> 
> I'm not sure what xmldsig.jar is (unless it's maybe a JSR-106 Security
> provider jar? which you don't need at all). And the version on the
> xmlsec-2.0.jar can not be right, if that is in fact supposed to be the
> jar from the Apache Santuario project. There is no v2.0 of that. The
> absolute latest release is 1.4.4. I checked and opensaml 2.2.3 which
> you are using shipped with xmlsec-1.4.2.jar.
> 
> So your dependencies appear to be incomplete and/or messed up. I'd
> reassess what you are doing and start over...