Question

I am working on this link in WSO2 IDS 4.0.0.

http://malalanayake.wordpress.com/2013/02/13/authentication-and-authorization-with-wso2esb-and-wso2is/

I develop the service as per above link In WSO2 IDS 4.0.0 Server evaluate the policy through the Tryit.

I entering same data and click on TEST EVALUTE.

Showing an error ” No applicable policies were found for the request”.

Can you anyone explain me where did i mistake.

Here i am sending my XCML Policy file.

<Policy xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17" PolicyId="EchoServicePolicy" RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable" Version="1.0">
   <Target>
      <AnyOf>
         <AllOf>
            <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
               <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">testRole</AttributeValue>
               <AttributeDesignator AttributeId="http://wso2.org/claims/role" Category="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="true"/>
            </Match>
         </AllOf>
      </AnyOf>
   </Target>
   <Rule Effect="Permit" RuleId="Rule-1">
      <Target>
         <AnyOf>
            <AllOf>
               <Match MatchId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
                  <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">read</AttributeValue>
                  <AttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" Category="urn:oasis:names:tc:xacml:3.0:attribute-category:action" DataType="http://www.w3.org/2001/XMLSchema#string" MustBePresent="true"/>
               </Match>
            </AllOf>
         </AnyOf>
      </Target>
   </Rule>
</Policy>   
Was it helpful?

Solution

The possibility is that this 'testUser' is not in the role of 'testRole'. You can go to Configure --> Users & Roles in management console and check this.

OTHER TIPS

Can you show us the XACML policy and the request. This error simply means that the none of the active policies in the IS are applicable to the received request.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top