Return-Path: 
 <axis-dev-return-71166-apmail-ws-axis-dev-archive=ws.apache.org@ws.apache.org>
Delivered-To: apmail-ws-axis-dev-archive@www.apache.org
Received: (qmail 97632 invoked from network); 21 May 2008 09:47:48 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 21 May 2008 09:47:48 -0000
Received: (qmail 66523 invoked by uid 500); 21 May 2008 09:47:43 -0000
Delivered-To: apmail-ws-axis-dev-archive@ws.apache.org
Received: (qmail 66477 invoked by uid 500); 21 May 2008 09:47:43 -0000
Mailing-List: contact axis-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-dev@ws.apache.org
list-help: <mailto:axis-dev-help@ws.apache.org>
list-unsubscribe: <mailto:axis-dev-unsubscribe@ws.apache.org>
List-Post: <mailto:axis-dev@ws.apache.org>
List-Id: <axis-dev.ws.apache.org>
Delivered-To: mailing list axis-dev@ws.apache.org
Received: (qmail 66466 invoked by uid 99); 21 May 2008 09:47:43 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 May 2008 02:47:43 -0700
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of MadLion@gmx.net designates
 213.165.64.20 as permitted sender)
Received: from [213.165.64.20] (HELO mail.gmx.net) (213.165.64.20)
    by apache.org (qpsmtpd/0.29) with SMTP; Wed, 21 May 2008 09:46:54 +0000
Received: (qmail 2398 invoked by uid 0); 21 May 2008 09:47:08 -0000
Received: from 194.114.62.66 by www031.gmx.net with HTTP;
 Wed, 21 May 2008 11:47:07 +0200 (CEST)
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"
Date: Wed, 21 May 2008 11:47:07 +0200
From: "Holger Uhlitzsch" <MadLion@gmx.net>
Message-ID: <20080521094707.197370@gmx.net>
MIME-Version: 1.0
Subject: AW: Re: Rampart 1.4 for Axis2 1.4
To: axis-dev@ws.apache.org
X-Authenticated: #2532651
X-Flags: 0001
X-Mailer: WWW-Mail 6100 (Global Message Exchange)
X-Priority: 3
X-Provags-ID: V01U2FsdGVkX19higVgdmRhVsTb+oFl/wdQIoJAqx+sELEMObBQ0W
 TSiPeiTvq5SY5pfaiJFHs/Jf2cXolqbTPtEQ==
X-GMX-UID: qZUGIHInZDIrd0WWXGY2WmB5emhmY0FD
X-Virus-Checked: Checked by ClamAV on apache.org

> I have tested the samples of RC2 and I have encountered a problem in sample 05. The response is:
>
> <?xml version="1.0" encoding="UTF-8"?>
>
> <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
>
> <soapenv:Header xmlns:wsa="http://www.w3.org/2005/08/addressing">
>
> <wsa:Action>http://www.w3.org/2005/08/addressing/soap/fault</wsa:Action>
>
> <wsa:RelatesTo>urn:uuid:DC6CBC0805A79583451210760374233</wsa:RelatesTo>
>
> </soapenv:Header>
>
> <soapenv:Body>
>
> <soapenv:Fault xmlns:wsse=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd ">
>
> <faultcode>wsse:InvalidSecurity</faultcode>
>
> <faultstring>General security error (SAML token security failure); nested exception is:
>
> org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod</faultstring>
>
> <detail/>
>
> </soapenv:Fault>
>
> </soapenv:Body>
>
> </soapenv:Envelope> In fact the SAML assertion looks like this:
>
> <Assertion xmlns="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp=" urn:oasis:names:tc:SAML:1.0:protocol" xmlns:saml=" urn:oasis:names:tc:SAML:1.0:assertion" xmlns:xsi=" http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd=" http://www.w3.org/2001/XMLSchema" AssertionID=" _7816cc0f3175b845fe6885392887dcfb" IssueInstant="2008-05-14T08:55:39.906Z"Issuer ="SAMPLE_STS" MajorVersion="1" MinorVersion="1">
>
> <Conditions NotBefore="2008-05-14T08:55:39.906Z" NotOnOrAfter=" 2008-05-14T09:00:39.906Z"/>
>
> <AttributeStatement>
>
> <Subject>
>
> <SubjectConfirmation>
>
> <ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</ ConfirmationMethod>
>
> <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
>
> <xenc:EncryptedKey xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id=" EncKeyId-urn:uuid:FF61AF1C61F5F11915121075533990612">
>
> <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5 "/>
>
> <ds:KeyInfo>
>
> <wsse:SecurityTokenReference xmlns:wsse=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd ">
>
> <wsse:KeyIdentifier EncodingType=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary " ValueType=" http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1 ">HYL371NzoOs2+IA24VDkBGcUFQM=</wsse:KeyIdentifier>
>
> </wsse:SecurityTokenReference>
>
> </ds:KeyInfo>
>
> <xenc:CipherData>
>
> <xenc:CipherValue>aRbQNN6......xenc:CipherValue>
>
> </xenc:CipherData>
>
> </xenc:EncryptedKey>
>
> </KeyInfo>
>
> </SubjectConfirmation>
>
> </Subject>
>
> <Attribute AttributeName="Name" AttributeNamespace=" https://rahas.apache.org/saml/attrns">
>
> <AttributeValue>Colombo/Rahas</AttributeValue>
>
> </Attribute>
>
> </AttributeStatement>
>
> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> 
> <ds:SignedInfo>
>
> <ds:CanonicalizationMethod Algorithm=" http://www.w3.org/2001/10/xml-exc-c14n#"/>
>
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
>
> <ds:Reference URI="#_7816cc0f3175b845fe6885392887dcfb">
>
> <ds:Transforms>
>
> <ds:Transform Algorithm=" http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
>
> <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"PrefixList ="code ds kind rw saml samlp typens #default xsd xsi"/>
>
> </ds:Transform>
>
> </ds:Transforms>
>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
>
> <ds:DigestValue>mIaVRuYws25Y9M/LYs8p2jUxp6c=</ds:DigestValue>
>
> </ds:Reference>
>
> </ds:SignedInfo>
>
> <ds:SignatureValue>gspHip...</ds:SignatureValue>
>
> <ds:KeyInfo>
>
> <ds:X509Data>
>
> <ds:X509Certificate>MIICTjC.....</ds:X509Certificate>
>
> </ds:X509Data>
>
> </ds:KeyInfo>
>
> </ds:Signature>
>
> </Assertion> Does anybody else have the same error?
>
> Thanks, Plamena 

Hi,

i didn't try the smaples but get the same error. See http://markmail.org/message/qxzaqknirrm2mt6p?q=list:org%2Eapache%2Ews%2Eaxis-user+uhlitzsch&page=1 .
I looks like rampart doesn't find the policy data.

Regards

-- 
GMX startet ShortView.de. Hier findest Du Leute mit Deinen Interessen!
Jetzt dabei sein: http://www.shortview.de/?mc=sv_ext_mf@gmx

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org