← Prev in month ← Prev in thread

XACML Namespaces and XSDs

From
Stefan E. Funk <>
Date
2010-12-21T16:25:04+00:00
ID
Thread
XACML Namespaces and XSDs
Dear XACML users,

we are using an XACML PDP for the middleware in the TextGrid project
(http://www.textgrid.de/en.html), that uses (originally) the following XSD files

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-saml-protocol-schema-os.xsd

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-saml-assertion-schema-os.xsd

and referenced from there

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-policy-schema-os.xsd


We now found some typos ("23.org" instead of "w3.org", "MinOccurs" instead of
"minOccurs") and some structural XML problems (one ">" too much, problems with
namespace definitions, prefixes, and locations) in this files, so we can not
use them for our PDP web service (code generation, etc).

Are there any newer and corrected or newer versions of the files somewhere?


I'll append our corrected files to this mail, and would gladly receive any
comments.

Thanks a lot and all the best.
Stefan.


--------------------------------------------------------------------------------

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-saml-protocol-schema-os.xsd

- removed ">", line 54
- changed "www.23.org" into "www.w3.org", line 4
- changed <xs:import namespace="urn:oasis:names:tc:SAML:2.0:assertion"
schemaLocation="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security"/>
to
http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd,
line 15 (from http://saml.xml.org/saml-specifications), afterwards removed
since not needed
- changed <xs:import namespace="urn:oasis:names:tc:SAML:2.0:protocol"
schemaLocation="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security"/>
to http://docs.oasis-open.org/security/saml/v2.0/saml-schema-protocol-2.0.xsd,
line 17 (from http://saml.xml.org/saml-specifications)
- added xmlns:tns="urn:oasis:xacml:2.0:saml:protocol:schema:os" to namespace
definitions, in between lines 9/10
- added tns prefix, line 30

--------------------------------------------------------------------------------

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-saml-assertion-schema-os.xsd

- removed ">"
- changed "www.23.org" into "www.w3.org", line 4
- changed <xs:import namespace="urn:oasis:names:tc:SAML:2.0:assertion"
schemaLocation="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security"/>
to
http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd,
line 15 (from http://saml.xml.org/saml-specifications)
- changed <xs:import namespace="urn:oasis:names:tc:SAML:2.0:protocol"
schemaLocation="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security"/>
to http://docs.oasis-open.org/security/saml/v2.0/saml-schema-protocol-2.0.xsd,
line 17 (from http://saml.xml.org/saml-specifications), afterwards removed
since not needed
- added xmlns:tns="urn:oasis:xacml:2.0:saml:assertion:schema:os" to namespace
definitions
- added tns prefixes
- changes samlp: to saml:
- corrected MinOccurs into minOccurs

--------------------------------------------------------------------------------

http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-policy-schema-os.xsd

- commented out xs:element minOccurs="0" ref="xacml:CombinerParameters", line
14: element removed due to jaxb compiler problems: you need only one type
CombinerParameters in the sequence, it seems to be superflous in choice

--------------------------------------------------------------------------------


-- 
-----------------------------------------------------------------------
Stefan E. Funk
DAASI International GmbH             Phone DAASI :    +49 7071 407109-6
Europaplatz 3                          Phone SUB :      +49 551 39-7700
D-72072 Tübingen                           Email : 
Germany                                      Web :  http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------
← Prev in month ← Prev in thread