DOM exception while parsing signed SAML request with extensions

Brent Putman putmanb at georgetown.edu
Fri Oct 18 15:58:07 EDT 2013


This should really go to the dev list.  Comments below.


On 10/18/13 3:13 PM, kotesh201 wrote:
> Hi,
>
> I am trying to send the xs:anyType element XML in signed SAML request
> extensions. 
> In order to bypass the signature verification by the shibboleth, I took out
> all the Secruty policy rules from relying-party.xml file. I am doing
> signature verification and CRL check on my own in external login handler.

Unrelated to your question, I'd be very interested to know why you are
doing all of that.



>
> When I try to send xs:anyType xml without signature elements, shibboleth is
> parsing successfully. If I try to send the xs:anyType which has signature
> elements, I am getting below error.
>

 In order to attempt to answer your question, we really need to see an
example of the full XML that is failing to parse and unmarshall.  I
assume it's a SAML 2 AuthnRequest?  And it's better if you send as an
attachment or post somewhere rather than pasting into the email body.


More information about the users mailing list