Non-Java clients and Identity server

Question

Hello.
Chapter 3 of the Identity Server Programmer's Guide describes an XML interface for authentication.
I've tried to prototype an application in Python to use this interface for user authentication. However, I keep finding typhos in the code in the document, and I'm having trouble getting it to work.
Has anyone managed to use the XML interface? Does anyone have any sample code, etc?
Regards,
Kyrre

Answer 1

Documentation has typos and a sample code which comes with IS is wrong and was never supposed to work. Here is a python example of authentication and authorization for you. It has one shortcut - I use userSSOToken as an appSSOToken too. It's a bug in IS6.0. Normally you have to login via Application module first to receive appSSOToken.
#!/usr/local/bin/python2.2
import socket
import string
import urllib
import sys
def pcookie(s):
if(s[0:16] == 'authIdentifier="'):
xs = s[16:]
return xs[:string.find(xs, '"')]
if len(sys.argv) < 4:
sys.exit('Usage: login.py host port pwfile')
f = open(sys.argv[3])
pw = string.split(f.readline())
# 1. Initiate login
request0='\
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\
<RequestSet vers="1.0" svcid="auth" reqid="1">\
<Request>\
<![CDATA[<?xml version="1.0" encoding="UTF-8"?>\
<AuthContext version="1.0">\
<Request authIdentifier="{0}">\
<NewAuthContext orgName="dc=amat,dc=com">\
</NewAuthContext>\
</Request>\
</AuthContext>]]></Request>\
</RequestSet>'
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((sys.argv[1], int(sys.argv[2])))
sl=socket.ssl(s);
sl.write('POST /amserver/authservice HTTP/1.0\n\
Accept: text/xml\n\
Content-Length: '+`len(request0)`+'\n\
Content-Type: text/xml;charset=UTF-8\n\n'+request0);
cookie=filter(lambda (x):x, map(pcookie, string.split(sl.read())))[0]
s.close()
#cookie=urllib.unquote(cookie)
# 2. Get login requirements
request1='\
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\
<RequestSet vers="1.0" svcid="auth" reqid="0">\
<Request>\
<![CDATA[<?xml version="1.0" encoding="UTF-8"?>\
<AuthContext version="1.0">\
<Request authIdentifier="' + cookie + '">\
<Login>\
<IndexTypeNamePair indexType="moduleInstance">\
<IndexName>LDAP</IndexName>\
</IndexTypeNamePair>\
</Login>\
</Request>\
</AuthContext>]]></Request>\
</RequestSet>'
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((sys.argv[1], int(sys.argv[2])))
sl=socket.ssl(s);
sl.write('POST /amserver/authservice HTTP/1.0\n\
Accept: text/xml\n\
Content-Length: '+`len(request1)`+'\n\
Content-Type: text/xml;charset=UTF-8\n\n'+request1);
try:
while(1):
sl.read()
except:
pass
# 3. Submit credentials
request2='\
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\
<RequestSet vers="1.0" svcid="auth" reqid="1">\
<Request><![CDATA[<?xml version="1.0" encoding="ISO-8859-1"?>\
<AuthContext version="1.0">\
<Request authIdentifier="' + cookie + '">\
<SubmitRequirements>\
<Callbacks length="2">\
<NameCallback>\
<Value>' + pw[0] + '</Value>\
</NameCallback>\
<PasswordCallback>\
<Value>' + pw[1] + '</Value>\
</PasswordCallback>\
</Callbacks>\
</SubmitRequirements>\
</Request>\
</AuthContext>]]></Request>\
</RequestSet>'
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((sys.argv[1], int(sys.argv[2])))
sl=socket.ssl(s);
sl.write('POST /amserver/authservice HTTP/1.0\n\
Accept: text/xml\n\
Content-Length: '+`len(request2)`+'\n\
Content-Type: text/xml;charset=UTF-8\n\n'+request2);
try:
while(1):
sl.read()
except:
pass
# 4. Perform authorization
request3='\
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\
<RequestSet vers="1.0" svcid="Policy" reqid="1">\
<Request><![CDATA[<?xml version="1.0" encoding="UTF-8"?>\
<PolicyService version="1.0">\
<PolicyRequest requestId="1" appSSOToken="' + cookie + '">\
<GetResourceResults userSSOToken="' + cookie + '" serviceName="iPlanetAMWebAgentService" resourceName="http://server.domain.com:80/" resourceScope="subtree">\
<EnvParameters>\
<AttributeValuePair>\
<Attribute name="requestIp"/>\
<Value>10.144.98.82</Value>\
</AttributeValuePair>\
</EnvParameters>\
<GetResponseDecisions>\
<Attribute name="uid"/>\
</GetResponseDecisions>\
</GetResourceResults>\
</PolicyRequest>\
</PolicyService>]]>\
</Request>\
</RequestSet>'
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((sys.argv[1], int(sys.argv[2])))
sl=socket.ssl(s);
sl.write('POST /amserver/policyservice HTTP/1.0\n\
Accept: text/xml\n\
Content-Length: '+`len(request3)`+'\n\
Content-Type: text/xml;charset=UTF-8\n\n'+request3);
try:
while(1):
print sl.read()
except:
print ''
sys.exit(1);