[keycloak-user] Undeclared namespace prefix "dsig" - still a problem in keycloak 3.3.0 CR2.

Michael Mok teatimej at gmail.com
Tue Oct 3 18:43:22 EDT 2017


Thanks for looking into this again. I have created new issue as suggested.

https://issues.jboss.org/browse/KEYCLOAK-5581



Best Regards

Michael Mok

On 29 September 2017 at 06:12, Michael Mok <teatimej at gmail.com> wrote:

> Hi there
>
> In regards to issuee 4818 (https://issues.jboss.org/browse/KEYCLOAK-4818),
> we are still encountering issue with recognising dsig.
>
> 06:54:51,265 WARN  [org.keycloak.saml.common] (default task-110) XML
> External Entity switches are not supported.  You may get XML injection
> vulnerabilities.
> 09:19:31,939 ERROR [io.undertow.request] (default task-245) UT005023:
> Exception handling request to /auth/realms/demo/login-actions/first-broker-login:
> org.jboss.resteasy.spi.UnhandledExcept
> ion: java.lang.RuntimeException: java.lang.RuntimeException:
> com.ctc.wstx.exc.WstxParsingException: Undeclared namespace prefix "dsig"
>  at [row,col {unknown-source}]: [1,914]
> at org.jboss.resteasy.core.ExceptionHandler.handleApplicationEx
> ception(ExceptionHandler.java:78)
> at org.jboss.resteasy.core.ExceptionHandler.handleException(Exc
> eptionHandler.java:222)
> at org.jboss.resteasy.core.SynchronousDispatcher.writeException
> (SynchronousDispatcher.java:179)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(Synchro
> nousDispatcher.java:422)
> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(Synchro
> nousDispatcher.java:213)
> at org.jboss.resteasy.plugins.server.servlet.ServletContainerDi
> spatcher.service(ServletContainerDispatcher.java:228)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatc
> her.service(HttpServletDispatcher.java:56)
> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatc
> her.service(HttpServletDispatcher.java:51)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(Se
> rvletHandler.java:85)
> at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.d
> oFilter(FilterHandler.java:129)
> at org.keycloak.services.filters.KeycloakSessionServletFilter.d
> oFilter(KeycloakSessionServletFilter.java:90)
>
>


More information about the keycloak-user mailing list