Aw: Re: shibboleth - uncaught runtime exception on request

[Ilya Rumyantsev]

Thanks, that explains the error. I tried something like this (just for testing purposes)

    <Script><![CDATA[
    try {
        pubCreds = subjects[0].getPrincipals().toArray();
	for (var i=0; i<pubCreds.length; i++){
	if (pubCreds[i].toString().startsWith("CN=")){
	       dnFromCert.addValue(pubCreds[i].toString());
	       }
	break;
	}
	}
    catch(err){
    }
    ]]></Script>

The problem now is: I need the certificate subject due to an Ldap Attribute DataConnector and of course on the second request there is no $dnFromCert variable available

        <FilterTemplate>
            <![CDATA[
               entryDn=$dnFromCert.get(0)
            ]]>
        </FilterTemplate>

What I am trying to achieve is:

1. a x509 Authentication (that gets me the subject with the script attribute
2. All other attributes are then to be looked up by the ldap DataConnector

How am I supposed to do that?

PS:
Thanks @Scott, you re totally right about toString() . I will change that in the final version, so far I am sure that with actually configured x509 login there will be no problems with the toString method 


> Gesendet: Mittwoch, 07. Dezember 2016 um 16:00 Uhr
> Von: "Cantor, Scott" <cantor.2 at osu.edu>
> An: "Shib Users" <users at shibboleth.net>
> Betreff: Re: shibboleth - uncaught runtime exception on request
>
> On 12/7/16, 9:56 AM, "users on behalf of Rod Widdowson" <users-bounces at shibboleth.net on behalf of rdw at steadingsoftware.com> wrote:
> 
> >[...] subjects [...].  Note that these will only be present if the attribute resolution has been associated with an act of 
> > authentication (and so this will not work for back channel requests). [1]
> 
> And the log trace was SAML 1, so yes, that's probably it, it's a query.
> 
> You can't seriously need SAML 1 at this point, and anything doing a query is likely a Shibboleth SP, which certainly supports SAML 2.
> 
> -- Scott
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>