Re: [sunxacml-discuss] sunxacml policy evaluation problem

[Seth P. <Set...@Su...>]

Hi Ashok. Sorry for the delay...I've had to ignore most XACML stuff for  
the last few days. Anyway..

I'm not sure exactly what's going wrong. Like you said, the policy is  
being found, but in processing it you're getting an error.  
Specifically, you're seeing:

> <Response>
>   <Result ResourceId="java.html">
>     <Decision>Indeterminate</Decision>
>     <Status>
>       <StatusCode  
> Value="urn:oasis:names:tc:xacml:1.0:status:processing-error"/>
>        
> <StatusMessage>urn:oasis:names:tc:xacml:1.0:function:string-one-and- 
> only expects a bag that contains a single element, got a bag with 0  
> elements</StatusMessage>
>     </Status>
>   </Result>
> </Response>

Which means that when the PDP (or, more accurately, the context  
handler) tried to resolve a value for the attribute "group" it came up  
empty. Are you sure you're using exactly the same Request with both the  
generated and the parsed policies? If the Requests are exactly the  
same, then I'm not entirely sure why you're seeing this error.

The only other thing I can think of off the top of my head is that  
you've added some whitespace or changed the case of your text  
somewhere, but I don't see any evidence of this. Basically, the error  
message you're seeing should indicate that the attribute was resolved  
correctly, but it had no values defined in the Request. Strange.  
Double-check that you're using exactly the same Request in both cases,  
and then let me know if you're still seeing trouble and I'll see how I  
can help.


seth