Just tested it on 6.4.1-SNAPSHOT with resolvertest from Shibboleth SP. 
Seems like CAS does not like <xenc:EncryptedData/> in <saml:EncryptedID/> 
inside <saml:Subject/>. Thats why `assertion.getSubject()` is null and 
therefore assertion.getSubject().getNameID() throws NPE.
Tested a SOAP request directly to idp/profile/SAML2/SOAP/AttributeQuery 
without encryption and everything works.
 

Robert schrieb am Montag, 27. September 2021 um 16:20:06 UTC+2:

>
> Can you tell me, how you tried to run the attribute query? Did you use 
> "resolvertest" from Shibboleth Utilies?
> specker schrieb am Dienstag, 1. September 2020 um 16:26:15 UTC+2:
>
>> Hi!
>>
>> Does really no one have an idea why there is a NPE being thrown?
>>
>> I would not mind a "proper" Error message or at least an Exception I can 
>> work with, but seeing a null pointer does not clear stuff up and since 
>> apprently there is a Handler missing something, I would love to know what.
>>
>> Especially since the actual Query SOAP request comes through just fine.
>>
>> Thanks!
>>
>> -- 
>> __________________________________________________________________
>> *** Sven Specker -- University of Frankfurt Computing Center ***
>> *********** UNIX System Administration (Auth/IDM) ****************
>> ***** [email protected] [Phone (+49)-69-798-15188 
>> <+49%2069%2079815188>] *****
>> ******************************************************************
>> __________________________________________________________________ 
>> Johann Wolfgang Goethe Universitaet
>> - Hochschulrechenzentrum -
>> Theodor W. Adorno-Platz 1 (PA-1P16)
>>
>> D-60323 Frankfurt/Main
>> __________________________________________________________________
>> ______________ TeX-users do it in {groups}________________________
>>
>>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/dc62307a-98a2-4682-82f5-92ce92626d44n%40apereo.org.

Reply via email to