[2008-06-10 00:49:48] JOIN #higgins :tdoman!n=TeeDoh@66.29.163.1.static.utahbroadband.com JOIN :#higgins [2008-06-10 01:22:59] QUIT tdoman [2008-06-10 02:38:53] JOIN #higgins :sourcerer!n=philipp@62.218.140.156 JOIN :#higgins [2008-06-10 02:48:46] JOIN #higgins :KPTN!n=KPTN@linagoralyon.pck.nerim.net JOIN :#higgins [2008-06-10 05:04:03] QUIT KPTN [2008-06-10 05:05:04] JOIN #higgins :KPTN!n=KPTN@linagoralyon.pck.nerim.net JOIN :#higgins [2008-06-10 05:45:51] QUIT nairbreklew [2008-06-10 06:50:44] JOIN #higgins :MikeMc!n=MikeMc@ool-457d0c29.dyn.optonline.net JOIN :#higgins [2008-06-10 07:08:55] JOIN #higgins :rcjsuen!n=rcjsuen@bas6-kitchener06-1177621509.dsl.bell.ca JOIN :#higgins [2008-06-10 07:19:36] Hi! [2008-06-10 07:20:20] Does anyknow know a SAML debugger? [2008-06-10 07:20:57] Some tool where I can paste a SAML assertion, which analyzes it, and tells me what could be wrong, or what could it mean? [2008-06-10 07:27:58] hey sourcerer, funny to see you here ;p (we wet a very long time ago about cacert) [2008-06-10 07:28:18] Hi asyd [2008-06-10 07:29:06] opensaml? [2008-06-10 07:33:10] sourcerer: do you mean more than XML compliance ? [2008-06-10 07:33:30] that will suppose to have all the federation env in place [2008-06-10 07:33:47] Yes. Something that checks XML wellformedness, the XMLDsig signature verification, the assertion itself, and tells me what's actually in it. [2008-06-10 07:33:54] Whether the signature is calculated correctly, ... [2008-06-10 07:34:01] or at list, the real private/public keys of each part of the circle [2008-06-10 07:34:16] hum [2008-06-10 07:34:28] The problem I have is that we have implemented SAML successfully in a test-environment, but now we moved to a production environment, and there it doesn't work. [2008-06-10 07:34:39] :) [2008-06-10 07:34:52] And the problem is that the consumer does not give much useful error messages, and somehow says that the signature can't be verified. [2008-06-10 07:35:00] when you talk about SAML, actually it's SAML 1 or 2 ? [2008-06-10 07:35:14] So I would like an independent viewpoint on whether the assertion is correct, or not. [2008-06-10 07:35:22] hum [2008-06-10 07:35:29] SAML 2.0 [2008-06-10 07:35:48] assertion are consumer specific I believe [2008-06-10 07:36:17] so if you try to validate with a "viewer consumer", it won't works [2008-06-10 07:36:21] ho, it may [2008-06-10 07:36:29] with a little trickery [2008-06-10 07:37:58] The XML wellformedness seems OK to me. [2008-06-10 07:38:18] actually, I don't know such a soft, but it would be of great help [2008-06-10 07:38:47] perhaps the best is to start from a certified low level lib, hum, lasso for instance [2008-06-10 07:39:10] and try to use it's api to débug what you want [2008-06-10 07:39:22] but it will be like reimplementing a client, [2008-06-10 07:39:28] I tried to check the digital signature with the web-analyzer from http://www.aleksey.com/xmlsec/ [2008-06-10 07:40:34] and it seems ok ? [2008-06-10 07:40:51] sourcerer: have you tried oxygenxml? it have some features about xmlsec/dsig [2008-06-10 07:41:18] (I didn't now this soft) [2008-06-10 07:41:23] xmlsec gives me some error messages, it seems that expor=xpointer / transform=xpointer isn't supported well enoug [2008-06-10 07:41:25] enough [2008-06-10 07:41:28] not an opensource one, but a demo is available iirc [2008-06-10 07:42:05] if you need to work a lot if xml, I think it's a good tool, And affordable (and multi OS)m unlike xmlspy [2008-06-10 07:43:14] sourcerer: if it's working in preview env,isn't it just a bad properties somewher ? [2008-06-10 07:43:47] for example, you change the bi key for the client, and didn't federate it again to the IDP ? [2008-06-10 07:44:49] or a bad copy, or site behind a proxy that change the url endpoint, or something like that ? [2008-06-10 07:47:18] sourcerer: http://rnd.feide.no/saml2debug [2008-06-10 07:48:21] KPTN: :D [2008-06-10 07:48:52] I'm thinking of the hours I could have save this soft, not a so long time ago... [2008-06-10 07:49:20] Hmm, pasting the XML on http://rnd.feide.no/saml2debug doesn't seem to help me much [2008-06-10 07:52:48] Ok, now I just got 2 XML files, the one from the test environment, where it works, and the one from the production, where it doesn't work. [2008-06-10 07:53:30] If anyone wants to examine them, I can make them availble [2008-06-10 07:58:23] sourcerer: I don't think I will able to say anything, but let's see, if you want.. [2008-06-10 08:12:04] JOIN #higgins :nairbreklew_!n=chatzill@static-68-162-255-8.bos.east.verizon.net JOIN :#higgins [2008-06-10 08:12:05] NICK nairbreklew [2008-06-10 09:18:36] JOIN #higgins :tdoman!n=TeeDoh@137.65.132.161 JOIN :#higgins [2008-06-10 09:32:27] QUIT tdoman [2008-06-10 09:32:28] JOIN #higgins :danie1!n=dsanders@nat/novell/x-7f64479c95c01a78 JOIN :#higgins [2008-06-10 09:33:49] PART #higgins [2008-06-10 09:34:52] The Lasso PHP binding doesn't seem to work [2008-06-10 09:34:57] as documented in the manual [2008-06-10 09:44:59] Thanks for the oXygen tip! That worked. The signatures are broken [2008-06-10 09:45:05] :) [2008-06-10 09:46:09] JOIN #higgins :Jimse!n=jimse@nat/novell/x-3bf6828bad118af4 JOIN :#higgins [2008-06-10 10:03:17] QUIT rcjsuen [2008-06-10 10:03:17] <_keturn:#higgins@higginsircbot|QUIT>QUIT _keturn [2008-06-10 10:05:27] JOIN #higgins :rcjsuen!n=rcjsuen@bas6-kitchener06-1177621509.dsl.bell.ca JOIN :#higgins [2008-06-10 10:08:05] <_keturn:#higgins@higginsircbot|JOIN>JOIN #higgins :_keturn!n=acapnoti@c-71-236-228-127.hsd1.or.comcast.net JOIN :#higgins [2008-06-10 10:37:53] JOIN #higgins :Jeesmon!n=jjacob@static-68-162-255-8.bos.east.verizon.net JOIN :#higgins [2008-06-10 10:43:12] JOIN #higgins :Jims1!n=jimse@137.65.229.79 JOIN :#higgins [2008-06-10 10:50:44] JOIN #higgins :tdoman!n=TeeDoh@nat/novell/x-1580ad7ec4a6f22b JOIN :#higgins [2008-06-10 10:55:36] QUIT Jimse [2008-06-10 11:36:03] hi folks - i have a general Higgins code capability question based on email thread I saw from Prakash about localization. Does anyone know if the Higgins components have been designed/developed for internationalization? [2008-06-10 11:37:53] we still need to do that [2008-06-10 11:38:23] NICK Jimse [2008-06-10 11:42:25] ok - was thinking that to get through this we would need to (a) agree on the specifics of what we mean by "internationalization" (e.g. external resoruce bundles, UTF8 support? others..) [2008-06-10 11:42:28] then [2008-06-10 11:43:02] (b) have component owners do an assesssment against those coding requirements to map out what work needs to be done to meet them [2008-06-10 11:43:08] make sense? [2008-06-10 11:43:40] yeah. it would be great if someone could drive that [2008-06-10 11:44:05] ok - i was talking to Mary on this ... I'll follow up and we could tag-team on this one... [2008-06-10 11:44:32] that would help a lot [2008-06-10 11:44:57] would need to find some good standards out there that define what robust internationalization coding requirements/practices are... [2008-06-10 11:45:12] any pointers to such would be most appreciated ;-) [2008-06-10 11:45:32] and we can use that as starting point [2008-06-10 11:48:40] JOIN #higgins :Jims1!n=jimse@137.65.132.12 JOIN :#higgins [2008-06-10 11:49:09] I found this one from google search http://www.eclipse.org/resources/?category=Internationalization [2008-06-10 11:52:21] thx Jeesmon... [2008-06-10 12:05:00] QUIT Jimse [2008-06-10 12:28:49] QUIT KPTN [2008-06-10 12:43:35] Jeesmon, is higgins2ant_0.9.0 the correct higgins 2 ant plugin to be using? [2008-06-10 12:43:58] NICK Jimse [2008-06-10 12:51:50] not sure. there was an email from valery on that. let me try to find that email [2008-06-10 12:58:47] jim, this what his email says [2008-06-10 12:58:49] In order to use new version of higgins2ant I'd suggest manually remove [2008-06-10 12:58:49] old version (remove higgins2ant_*.jar from ${ECLIPSE_HOME}/plugins [2008-06-10 12:58:49] folder) and then install new one using [2008-06-10 12:58:49] http://download.eclipse.org/technology/higgins/higgins2ant URL from [2008-06-10 12:58:49] Eclipse update manager (Help->Software Updates->Find and Install...->Search for new features to install). [2008-06-10 12:59:12] I build and I get a 1.0.0.2 version [2008-06-10 13:00:13] http://dev.eclipse.org/mhonarc/lists/higgins-dev/msg04202.html [2008-06-10 13:00:46] PART #higgins "Konversation terminated!" [2008-06-10 13:01:22] the version on download page is 1.0.0.3 [2008-06-10 13:01:52] ah [2008-06-10 13:02:10] so, the latest one inside the project's lib folder is 0.9.0 [2008-06-10 13:02:29] maybe we should kill the lib folder if people should install from the download page [2008-06-10 13:24:58] JOIN #higgins :MikeMc!n=MikeMc@nat/ibm/x-55902bb5f1594af2 JOIN :#higgins [2008-06-10 13:52:24] miiiiike [2008-06-10 13:52:28] you there? [2008-06-10 13:52:33] yes [2008-06-10 13:52:57] don't know if you've seen my email.. i started to work with the sts a bit in my project [2008-06-10 13:53:04] ok [2008-06-10 13:53:14] but i have quite a few questions [2008-06-10 13:53:17] ok [2008-06-10 13:54:09] I am suffering from some evil Eclipse SVN problems ever since I attempted to install buckminster so I can tryo to help you but cannot update or checking - think I'll need to reinstall eclipse :-( [2008-06-10 13:55:59] hmm i need some time anyway to try to remember what questions i actually had [2008-06-10 13:56:23] ok - I will be here for a little while longer then will try to get on when I get home [2008-06-10 13:58:06] ok i'll try to formulate a few meaningful questions :) [2008-06-10 13:58:46] k [2008-06-10 14:05:30] PART #higgins [2008-06-10 14:05:43] btw, fwiw, I did get the latest higgins2ant to work for me w/ the link jeesmon posted [2008-06-10 14:35:39] [Global Notice] Hi all, We are now able to receive donations via Paypal again and should you wish to make a one-off donation, create a subscription or re-new a previous subscription you can do so using the links at the left-hand sidebar on http://freenode.net Thank you for using freenode and have a great day! [2008-06-10 14:58:22] PART #higgins [2008-06-10 16:10:00] JOIN #higgins :sourcerer!n=philipp@212-183-34-154.adsl.highway.telekom.at JOIN :#higgins [2008-06-10 16:26:20] QUIT sourcerer [2008-06-10 16:26:21] QUIT rcjsuen [2008-06-10 17:14:01] JOIN #higgins :sourcerer!n=philipp@193.238.157.95 JOIN :#higgins [2008-06-10 17:56:45] JOIN #higgins :rcjsuen!n=rcjsuen@eitnaa27.uwaterloo.ca JOIN :#higgins [2008-06-10 18:05:38] QUIT sourcerer [2008-06-10 19:44:06] QUIT tdoman [2008-06-10 19:50:30] QUIT nairbreklew [2008-06-10 20:05:16] QUIT rcjsuen [2008-06-10 20:30:14] JOIN #higgins :rcjsuen!n=rcjsuen@bas6-kitchener06-1177621509.dsl.bell.ca JOIN :#higgins [2008-06-10 21:14:59] QUIT Jimse [2008-06-10 21:22:48] JOIN #higgins :nairbreklew_!n=chatzill@66-168-115-207.dhcp.oxfr.ma.charter.com JOIN :#higgins [2008-06-10 21:22:49] NICK nairbreklew [2008-06-10 21:35:03] QUIT peacekeeper [2008-06-10 22:46:48] JOIN #higgins :nairbreklew_!n=chatzill@66-168-115-207.dhcp.oxfr.ma.charter.com JOIN :#higgins [2008-06-10 22:56:19] QUIT nairbreklew [2008-06-10 23:11:58] QUIT rcjsuen [2008-06-10 23:39:51] JOIN #higgins :gambler!n=orion@124-171-223-254.dyn.iinet.net.au JOIN :#higgins [2008-06-10 23:39:53] hi