RequestedAttribute

Brent Putman putmanb at georgetown.edu
Wed May 3 15:43:50 EDT 2017



On 5/3/17 11:59 AM, Massimiliano Masi wrote:
>
>
> I am using this code (buildSAMLObject is from the Book). I see (in
> the last for loop) the values in there, : 
>

I don't know Java 8 lambdas very well yet, but the OpenSAML code looks
fine.  So I checked...

> The output is without any attribute value over the Requested
> Attribute. Am I doing some stupid thing here? 
>

No, you aren't.  Turns out you have hit a bug which which has been in
the codebase since the earliest time (literally earliest months) of v2
(March 2006).  I think that's the new project record for longest
undiscovered bug in our code. :-)   I've opened an issue, will commit
the fix and unit tests today.

https://issues.shibboleth.net/jira/browse/OSJ-204

The fix is very simple, but I don't know when we'll be doing a patch
release of OpenSAML.  A 3.4.0 is probably not going to be til later
this year.  Since this is just a change to an XMLObject impl class, I
suppose you could make a local copy of the fixed impl class and
associated builder, register that builder for the RequestedAttribute
instead of the built-in one.  That could allow you to avoid having to
use a full custom source build of OpenSAML before we do a release.  But
of course you could do a source build too, if you wanted.   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170503/aa600444/attachment-0001.html>


More information about the dev mailing list